[XALANC-760] Code analysis revealed multiple potential buffer overflows

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.11
• Component/s: XalanC
• Assignee: Steven J. Hathaway
• Reporter: Int3
• Created: 02/Mar/15 04:28
• Updated: 02/Mar/15 04:29

Description

src/xalanc/Harness/XalanXMLFileReporter.cpp
The float at line 490 can exceed 40 bytes in length (max double is 317 bytes)

src/xalanc/Utils/MsgCreator/MsgCreator.cpp
This utility lacks any buffer bounding to protect against buffer overflows

src/xalanc/Utils/MsgCreator/InMemHandler.cpp
This utility lacks any buffer bounding to protect against buffer overflows

src/xalanc/XalanExe/XalanExe.cpp
There is no upper bound on n_maxParams