Re: [dev] [sbase] sha512-224sum: stack-buffer-overflow

From: Страхиња Радић <sr_AT_strahinja.org>
Date: Mon, 3 Nov 2025 17:52:45 +0100

Дана 25/11/03 12:21PM, Roberto E. Vargas Caballero написа:
> I think the problem comes more from the fact that the code
> is not ready for empty strings and it does something like
> strlen(s) - 1 to remove the eos and then it is fucked.

If that is the case, then maybe assert(3) would help in future such
cases. Granted, it adds LoC, but makes these kind of errors easier to
pinpoint.
Received on Mon Nov 03 2025 - 17:52:45 CET