Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix unbounded write of sscanf() #36

Merged
merged 1 commit into from
May 16, 2023
Merged

Conversation

szsam
Copy link
Contributor

@szsam szsam commented May 15, 2023

Buffer write operations that do not control the length of data written may overflow.

Buffer write operations that do not control the length of data written
may overflow.
@symisc symisc merged commit 504c0d3 into symisc:master May 16, 2023
@Machiry
Copy link

Machiry commented Mar 25, 2024

Hello @symisc and @timgates42 ,

My name is Aravind Machiry, Assistant Professor at Purdue's ECE Department.

Thank you for considering this pull request. This pull request was the result of our on-going research work (along with @szsam) to improve the security and quality of open-source embedded projects.

In addition to scanning codebases with CodeQL, we are also doing a short (~4 minutes) survey to understand the use of static analysis tools like gcc -Wall and CodeQL in embedded software projects.

It would greatly benefit our research if you could fill this anonymous survey: https://purdue.ca1.qualtrics.com/jfe/form/SV_0OnXfr5plPe1QCa

Thank you,
Aravind

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants