Coverity SECURE_CODING - CID 10659
| Affects | Status | Importance | Assigned to | Milestone | ||
|---|---|---|---|---|---|---|
| Nux | Status tracked in 4.0 | |||||
| 2.0 |
Fix Committed
|
Undecided
|
Unassigned | |||
| 4.0 |
Fix Released
|
Medium
|
Unassigned | |||
| Unity |
Fix Released
|
Undecided
|
Unassigned | |||
| nux (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | |||
| unity (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | |||
| Precise |
Fix Released
|
Undecided
|
Unassigned | |||
Bug Description
This bug is exported from the Coverity Integration Manager on Canonical's servers. For information on how this is done please see this website: https:/
CID: 10659
Checker: SECURE_CODING
Category: No category available
CWE definition: http://
File: /tmp/buildd/
Function: main()
Code snippet:
844 free (results.error);
845
846 // drop result file
847 if (results.result != 5) {
CID 10659 - SECURE_CODING
[VERY RISKY]. Using "sprintf" can cause a buffer overflow when done incorrectly. Because sprintf() assumes an arbitrarily long string, callers must be careful not to overflow the actual space of the destination. Use snprintf() instead, or correct precision specifiers.
848 sprintf(
849 resultfile = open(resultfile
850 if (resultfile > 0)
851 close(resultfile);
852 }
853
Related branches
- Tim Penhey (community): Approve
- Steve Baker (community): Needs Resubmitting
- Jay Taoko: Pending requested
-
Diff: 99 lines (+11/-11)4 files modifiedNux/AnimatedTextureArea.cpp (+2/-2)
NuxGraphics/FontTexture.cpp (+7/-7)
NuxGraphics/GLTextureResourceManager.cpp (+1/-1)
tools/unity_support_test.c (+1/-1)
| Product Strategy Coverity Bug Uploader (coverity-uploader) wrote nux-trunk: /tmp/buildd/nux-2.4.0/tools/unity_support_test.c | #1 |
| Changed in nux: | |
| importance: | Undecided → Medium |
| Changed in unity: | |
| status: | New → Fix Committed |
| milestone: | none → 6.0 |
| Changed in nux: | |
| status: | Fix Committed → Fix Released |
| Changed in unity: | |
| status: | Fix Committed → Fix Released |
| Launchpad Janitor (janitor) wrote | #2 |
| Changed in nux (Ubuntu): | |
| status: | New → Fix Released |
| no longer affects: | nux (Ubuntu Precise) |
| Changed in unity (Ubuntu): | |
| status: | New → Fix Released |
| Changed in unity (Ubuntu Precise): | |
| status: | New → Fix Released |
Source file with Coverity annotations.