Report
wget src/vms.c: potential overflow in VMS getpwuid() (unbounded strcpy)
d43544a7-ac11-4c23-b7af-d44f66614329
In wget's VMS compatibility code (src/vms.c), getpwuid() copies strings into fixed-size global buffers using strcpy without validating input length from cuserid() and the sys$getuai-derived owner string. If t_userid or owner[1..] exceed destination sizes (vms_userid[16], vms_owner[40]), this will overflow and corrupt memory, potentially leading to crash or code execution.