gpgrt: Possible stack overflow in es_printf for "%.100f" et al format specifiers.
Closed, ResolvedPublic

Assigned To
Authored By
• werner
Tue, Apr 28, 11:08 AM
Subscribers

Description

From the original report:

A double value (e.g., DBL_MAX) can have up to 309 decimal digits before the decimal point. When formatted with a precision of 100 (%.100f), the resulting string can exceed 409 characters (309 integer digits + 1 decimal point + 100 fractional digits + 1 null terminator). This exceeds the 350-byte stack buffer, leading to a stack overflow. Using long double exacerbates this, potentially writing thousands of bytes out of bounds

Related Objects

Event Timeline

• werner created this object in space Restricted Space.
• werner changed the task status from Open to Testing.Wed, Apr 29, 2:42 PM
• werner triaged this task as High priority.
• werner shifted this object from the Restricted Space space to the S1 Public space.
• werner claimed this task.