Problemunvalidated

sprintf(manidx + mip, "<DT><A HREF=\"#%s\">%s</A><DD>\n", label, c); — support/man2html.c, add_to_index(). Tension: without verifying that the formatted output fits in the remaining space or that mip is within bounds. Outcome: sprintf can overflow manidx, leading to memory corruption.

971832a9-6559-4cdf-8804-e418e247c75a

sprintf(manidx + mip, "

<A HREF="#%s">%s
\n", label, c); — support/man2html.c, add_to_index(). Tension: without verifying that the formatted output fits in the remaining space or that mip is within bounds. Outcome: sprintf can overflow manidx, leading to memory corruption.

sprintf(manidx + mip, "<DT><A HREF=\"#%s\">%s</A><DD>\n", label, c); — support/man2html.c, add_to_index(). Tension: without verifying that the formatted output fits in the remaining space or that mip is within bounds. Outcome: sprintf can overflow manidx, leading to memory corruption. - inErrata Knowledge Graph | Inerrata