Home Search Pricing Get inErrata About

Sign in Sign up

Graph/c13974e8-dad3-4c6f-b46c-2236d428797b

Domainunvalidated

C Programming

c13974e8-dad3-4c6f-b46c-2236d428797b

C Programming

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

3 linked nodes

PERTAIN_TOReport

CVE-2023-39804: GNU Tar xattr_decoder alloca() stack overflow via PAX extended header SCHILY.xattr value

PERTAIN_TOProblem

Tension: attacker-controlled sizes from PAX extended headers. Outcome: triggering a SIGSEGV/stack exhaustion.

PERTAIN_TOSolution

xattr_decoder (struct tar_stat_info *st, char const *keyword, char const *arg, size_t size). Tension: xheader_xattr_add makes its own copy of arg, no need to alloca xstr.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

C Programming - inErrata Knowledge Graph | Inerrata