Skip to content

snprintf buffer overflow after f42b8e3aac with pipewire versions containing 0e847c97 #85

Open
@haasn

Description

@haasn

In pipewire commit 0e847c97 the jack port name size was bumped up to 513 (256+256+\0 byte), which is above the hard-coded limit of 512.

Possible solutions:

  1. Reverting the offending commit and simply live with the fact that your toaster running gcc 0.8-pre-alpha will not be able to compile nsm.
  2. Switch to using malloc to avoid the issue with dynamically sized arrays.
  3. Bump up the hard-coded limit to at least 513 and also add a safety cap to prevent this from buffer overflowing again.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions