[Bugs] [Bug 1267735] changelog: SuSE build system code audit errors

bugzilla at redhat.com bugzilla at redhat.com
Fri Oct 2 11:59:23 UTC 2015


https://bugzilla.redhat.com/show_bug.cgi?id=1267735



--- Comment #2 from Kaleb KEITHLEY <kkeithle at redhat.com> ---
excerpt from the build log

...
[  579s] ... running 01-check-debuginfo
[  579s] ... testing for empty debuginfo packages
[  579s] ... running 02-check-gcc-output
[  579s] ... testing for serious compiler warnings
[  579s]     (using /usr/lib/build/checks-data/check_gcc_output)
[  579s]     (using //.build.log)
[  579s] 
[  579s] I: Statement might be overflowing a buffer in strncat. Common mistake:
[  579s]    BAD: strncat(buffer,charptr,sizeof(buffer)) is wrong, it takes the
left over size as 3rd argument
[  579s]    GOOD: strncat(buffer,charptr,sizeof(buffer)-strlen(buffer)-1)
[  579s] E: glusterfs bufferoverflowstrncat changelog-helpers.c:1909:25
[  579s] E: glusterfs bufferoverflowstrncat changelog-helpers.c:1917:25
...

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=blxzlsKxRW&a=cc_unsubscribe


More information about the Bugs mailing list