Buffer overflow in CGI kioslave?

Juergen Pfennig info at j-pfennig.de
Tue Jun 20 10:03:04 BST 2006


Hi,

somebody reported a CGI bug the causes addition spaces to be inserted
in the output HTML. Unfortunately I have to confirm this. The bug happens
if the output is lengthy and becomes not always visible. But is still
reproducable.

Could it be that the fread() function returns unicode? If so then there
is a badly sized buffer declared:

     char buffer[4090]

should become

     char buffer[4098]

same (unicode) thing:

     buffer[n] = 0;

should become

     buffer[n] = 0;
     buffer[n+1] = 0;

Right?
Yours Jürgen




More information about the kfm-devel mailing list