[Klone-users] Error request.h for request_get_uploaded_file

[Mickael Auger]

Hi KLone Team,

I use request_get_uploaded_file() function.
But the prototype of this function in request.h is different of this in
request.c

The size of buffer in request.h are smaller than this in request.c.

So then I use the request_get_uploaded_file() function with buffers of size
"U_PATH_MAX", there are a memory overflow.

For information, strncpy() pads the remainder of buffer with null bytes,
but snprintf() just adds one null byte and it does not affect the rest of
the buffer

Bye
-- 
Mickaël AUGER
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://koanlogic.com/pipermail/klone-users/attachments/20090904/cf6fd12f/attachment.htm