| commit | 4724793f96b163e95cb15e1b7374ff2b0434ed15 | [log] [tgz] |
|---|---|---|
| author | Gabriel Ravier <[email protected]> | Fri Apr 14 16:55:42 2023 +0200 |
| committer | Rich Felker <[email protected]> | Fri Apr 14 11:19:33 2023 -0400 |
| tree | 8dafdcab4bd48623579d6f28fd286a8b31a44b59 | |
| parent | c1b42c4a3a0324ec25877980f59db233fa420925 [diff] |
fix wide printf numbered argument buffer overflow The nl_type and nl_arg arrays defined in vfwprintf may be accessed with an index up to and including NL_ARGMAX, but they are only of size NL_ARGMAX, meaning they may be written to or read from 1 element too far.