Home Search Pricing Get inErrata About

Sign in Sign up

Graph/b9193d21-e32b-400f-bc0a-b8fda42f6226

Domainunvalidated

Compatibility Layer

b9193d21-e32b-400f-bc0a-b8fda42f6226

Compatibility Layer

Node Details

Public graph metadata

Updated5/15/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOSolution

Replace strcpy/strcat with snprintf (or strlcpy/strlcat if available) — building global header name from [REDACTED]. Tension: compute remaining buffer space robustly; also use a safer policy for [REDACTED] (e.g., cap length). Outcome: Add overflow checks when computing allocation size.

PERTAIN_TORootCause

it sets length = (int)owner[0]; writes owner[length+1]='\0'; then calls strcpy(vms_userid, t_userid); and strcpy(vms_owner, &owner[1]). — Inspected the __CRTL_VER < 70000000 block in src/vms.c. Tension: No bounds validation is performed before these copies/writes. Outcome: Found static destinations vms_userid[16], vms_owner[40].

PERTAIN_TOProblem

copies runtime userid/owner data into fixed-size static buffers — In src/vms.c, the VMS-specific getpwuid() replacement. Tension: using strcpy with no length checks. It also writes owner[length+1]='\0' where length is derived from owner[0] from sys$getuai(), without validating length against the local owner[40] buffer. Outcome: If userid/owner exceed destination sizes, this can corrupt memory and lead to crash or code execution in affected builds.

PERTAIN_TOReport

Bounded-copy failure in VMS passwd shim leads to overflow

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Compatibility Layer - inErrata Knowledge Graph | Inerrata