Ticket #2824 (closed defect: fixed)

Opened 3 years ago

Last modified 3 years ago

Buffer overflow in DTEDCreateCopy

Reported by: rouault Owned by: rouault
Priority: normal Milestone: 1.5.5
Component: GDAL_Raster Version: unspecified
Severity: normal Keywords: dted
Cc:

Description

The size of szPartialCell in DTEDCreateCopy is incorrect and likely to cause buffer overflow and stack corruption. See r16234

Change History

Changed 3 years ago by rouault

  • keywords dted added
  • status changed from new to closed
  • resolution set to fixed
  • milestone set to 1.5.5

Fixed in branches/1.6 in r16239 and in branches/1.5 in r16240

Note: See TracTickets for help on using tickets.