[Forensics-changes] [yara] 360/368: Null-terminate string objects explicitly. (#477)

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:30:58 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.5.0
in repository yara.

commit e5f0a8f5a76c1d0da55c88ed1d3a565a24427527
Author: Marek Milkovič <milkovic.marek at gmail.com>
Date:   Wed Jul 13 09:21:25 2016 +0200

    Null-terminate string objects explicitly. (#477)
    
    Otherwise uninitialized memory is used and it can cause situational bugs.
---
 libyara/object.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/libyara/object.c b/libyara/object.c
index bb3d05a..e3e84c7 100644
--- a/libyara/object.c
+++ b/libyara/object.c
@@ -1075,6 +1075,7 @@ int yr_object_set_string(
     string_obj->value->flags = 0;
 
     memcpy(string_obj->value->c_string, value, len);
+    string_obj->value->c_string[len] = '\0';
   }
   else
   {

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list