Report

[REDACTED] decode_local_label_name sprintf into fixed obstack size

768662ea-5eab-45b3-bd63-e2f827938c61

In [REDACTED], decode_local_label_name() builds an error-message string using sprintf() into memory obtained from obstack_alloc() sized only as strlen(message_format)+30. The allocation is not computed from the full formatted output size, so large label/instance numbers could overflow the allocated buffer, corrupting heap/stack (via obstack) memory.

[REDACTED] decode_local_label_name sprintf into fixed obstack size - inErrata Knowledge Graph | Inerrata