Mon Mar 29 15:16:16 PDT 2010
- Previous message: [Slony1-bugs] [Bug 55] Possible buffer overflow in slon, still happens as of 1.2.14
- Next message: [Slony1-bugs] [Bug 83] bugzilla has no version entry for version 2.0
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
http://www.slony.info/bugzilla/show_bug.cgi?id=55 paul cannon <pcannon+slonybugzilla at gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|FIXED | Status|RESOLVED |REOPENED --- Comment #6 from paul cannon <pcannon+slonybugzilla at gmail.com> 2010-03-29 15:16:16 PDT --- The fix from Jan will not address this problem. The problem is that the va_list "ap" gets reused by a new call to vsnprintf() when outbuf is too small and has to be realloc'd. Since vsnprintf has to read the contents of ap, ap becomes undefined after it returns. If you want to use the list of variable arguments multiple times (i.e., call vsnprintf multiple times), you must copy it using va_copy(). I can verify that it is still in 1.2.20; we were bit by it just last week, when I posted my comment, and we run 1.2.20. -- Configure bugmail: http://www.slony.info/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. You are the assignee for the bug.
- Previous message: [Slony1-bugs] [Bug 55] Possible buffer overflow in slon, still happens as of 1.2.14
- Next message: [Slony1-bugs] [Bug 83] bugzilla has no version entry for version 2.0
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the Slony1-bugs mailing list