Uploaded image for project: 'MariaDB Connector/C'
  1. MariaDB Connector/C
  2. CONC-452

OVERRUN error (CWE-119) in file libmariadb/ma_stmt_codec.c

Details

    • Bug
    • Status: Closed (View Workflow)
    • Blocker
    • Resolution: Fixed
    • 3.1.6
    • 3.1.8
    • None
    • All

    Description

      Hi,

      I'm working on fixing errors provided by covscan on project mariadb-connector-c (3.1.6) and I have problem with solving one of them.

      IMHO it's quite an important one, so I want to ask you if you can help me fix it.

      This is log from covscan:
      Error: OVERRUN (CWE-119):
      mariadb-connector-c-3.1.6-src/libmariadb/ma_stmt_codec.c:1171: overrun-buffer-val: Overrunning array "dtbuffer" of 60 bytes by passing it to a function which accesses it at byte offset 253.

      1. 1169| break;
      2. 1170| }
      3. 1171|-> convert_froma_string(r_param, dtbuffer, length);
      4. 1172| break;
      5. 1173| }

      I tried to look at it but unfortunately there is a lot of stuff to process, so I'm kindly asking for your assistance.

      Thank you so much
      Lukas

      Attachments

        Activity

          georg Georg Richter added a comment -

          Thanks for your bug report.

          I classified this CVE 1,5 years ago as false positive - however after rechecking this CVE, I need to check if we can force a buffer overrun via mysql_stmt_fetch_column()

          georg Georg Richter added a comment - Thanks for your bug report. I classified this CVE 1,5 years ago as false positive - however after rechecking this CVE, I need to check if we can force a buffer overrun via mysql_stmt_fetch_column()

          Thanks for quick response,

          Okay, please let me know if something updated.

          ljavorsk Lukas Javorsky added a comment - Thanks for quick response, Okay, please let me know if something updated.
          georg Georg Richter added a comment -

          Fixed. rev. 1218ffac1a9adefd6428e68b6154bc54a04343aa

          georg Georg Richter added a comment - Fixed. rev. 1218ffac1a9adefd6428e68b6154bc54a04343aa

          People

            georg Georg Richter
            ljavorsk Lukas Javorsky
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.