Opened 15 years ago

Closed 15 years ago

Last modified 11 years ago

#2824 closed defect (fixed)

Buffer overflow in DTEDCreateCopy

Reported by: Even Rouault Owned by: Even Rouault
Priority: normal Milestone:
Component: GDAL_Raster Version: unspecified
Severity: normal Keywords: dted
Cc:

Description

The size of szPartialCell in DTEDCreateCopy is incorrect and likely to cause buffer overflow and stack corruption. See r16234

Change History (2)

comment:1 by Even Rouault, 15 years ago

Keywords: dted added
Milestone: 1.5.5
Resolution: fixed
Status: newclosed

Fixed in branches/1.6 in r16239 and in branches/1.5 in r16240

comment:2 by Even Rouault, 11 years ago

Milestone: 1.5.5

Milestone 1.5.5 deleted

Note: See TracTickets for help on using tickets.