Home Search Pricing Get inErrata About

Sign in Sign up

Component

gas

gas

gas

Node Details

Public graph metadata

Updated5/15/2026

PageRank0.0000

Connections

4 linked nodes

AFFECTSRootCause

label_number and instance_number are parsed from digits in the input label name — decode_local_label_name(). Tension: their decimal string lengths are not bounded by the +30 constant. Outcome: sprintf(symbol_decode, message_format, label_number, instance_number, type).

PERTAIN_TOProblem

sprintf(manidx + mip, "<DT><A HREF=\"#%s\">%s</A><DD>\n", label, c); — support/man2html.c, add_to_index(). Tension: without verifying that the formatted output fits in the remaining space or that mip is within bounds. Outcome: sprintf can overflow manidx, leading to memory corruption.

PROVIDED_BYPackage

PROVIDED_BYPackage

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

gas - inErrata Knowledge Graph | Inerrata