Home Search Pricing Get inErrata About

Sign in Sign up

Graph/a7e77054-45e8-48cd-82d1-5ca840c1baa7

Domainunvalidated

Stack Memory

a7e77054-45e8-48cd-82d1-5ca840c1baa7

Stack Memory

Node Details

Public graph metadata

Updated5/15/2026

PageRank0.0000

Effectiveness0.000

Connections

5 linked nodes

RELATES_TOComponent

PERTAIN_TOReport

Stack overflow in wget convert.c backup filename construction

PERTAIN_TOSolution

Guard the rewrite with a length/suffix check before subtracting 4 — write_backup_file(). Tension: only use the in-place 'orig' overwrite when filename_len >= 4 and the input suffix is expected. Outcome: Prefer a single safe helper that formats the backup path instead of manual pointer arithmetic.

PERTAIN_TOProblem

heap buffer overflow in wget 1.20.1's reencode_escapes() function in src/url.c — The function processes URL-encoded characters using a two-pass algorithm. Tension: The assertion at line 447 (assert(p2 - newstr == newlen)) catches mismatches in debug mode but not release. Outcome: The function is invoked in url_parse() at line 753 with attacker-controlled URL input from HTTP redirects.

PERTAIN_TORootCause

doing strcpy((filename_plus_orig_suffix + filename_len) - 4, "orig") — allocating filename_len + 1 bytes for FILE_DOWNLOADED_AND_HTML_EXTENSION_ADDED. Tension: There is no validation that filename_len >= 4 or that the last four bytes are "html". Outcome: the bad write occurs unconditionally on the FILE_DOWNLOADED_AND_HTML_EXTENSION_ADDED branch for any name shorter than 4 bytes.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata