Daniil Sarafannikov 5b90bc8285 roken:strsep_copy: Fix out-of-bounds write in strsep_copy
In case len < (size_t)(*stringp - save) and len > 0
access to buf[l] leads to out-of-bounds write as
l = len and len means the length of buffer.

Change evaluation of l: only len - 1 elements of
buffer can be used for memcpy and terminator
should be written to buf[len - 1] (in case l = len - 1).
Also, this value of l is not used when len == 0,
so we calculate it only when len > 0.

Pair-Programmed-With: Dmitry Mikhalchenko <tascad@altlinux.org>
Signed-off-by: Daniil Sarafannikov <sarafannikovda@sgu.ru>
2026-06-30 10:19:03 +01:00
2026-06-16 11:02:29 -05:00
2026-01-18 19:06:17 -06:00
2026-06-30 10:16:16 +01:00
2026-06-16 09:46:42 -05:00
2004-02-12 14:19:16 +00:00
2000-06-07 10:01:25 +00:00
2002-08-21 13:29:08 +00:00
2024-06-16 23:30:48 -04:00
2024-06-16 23:30:48 -04:00
2024-06-16 23:30:48 -04:00
2019-06-07 22:03:05 -04:00
2023-01-12 10:19:35 -06:00
2014-08-23 19:14:10 -07:00
2026-01-07 17:49:17 -06:00
2026-06-16 11:02:29 -05:00
2020-06-26 11:29:15 -04:00
2019-06-09 13:43:47 -04:00
2010-01-05 19:21:45 +01:00

GitHub Build Workflow GitHub Build Workflow GitHub Build Workflow Coverage Status

Heimdal

Heimdal is an implementation of:

  • ASN.1/DER,
  • PKIX, and
  • Kerberos.

For information how to install see here.

There are man pages for most of the commands.

Bug reports and bugs are appreciated. Use GitHub issues.

For more information see the project homepage https://heimdal.software/heimdal/ or the mailing lists:

heimdal-announce@heimdal.software low-volume announcement heimdal-discuss@heimdal.software high-volume discussion

send mail to heimdal-announce-subscribe@heimdal.software and heimdal-discuss-subscribe@heimdal.software respectively to subscribe.

Build Status

GitHub Build Workflow GitHub Build Workflow GitHub Build Workflow Coverage Status

Languages
C 91.9%
Shell 2.9%
Roff 2.8%
Makefile 0.6%
M4 0.6%
Other 1.1%