Re: [hackers] [sbase] [PATCH] printf: Do not read past the end of the format string

From: Tom Schwindl <schwindl_AT_posteo.de>
Date: Tue, 30 Aug 2022 10:47:56 +0000

> Here, we enter the loop with `i = formatlen'. After the dot (`.') is matched,
> `i' is increased by one and effectively "overflows".

This should actually be:

Here, after the dot (`.') is matched, the same thing as in the previous case happens.
`i' is matched three times instead of the expected two and thus effectively "overflows".

--
Best Regards,
Tom Schwindl

Received on Tue Aug 30 2022 - 12:47:56 CEST