[XERCESC-1179] IconvFBSD transcode() string termination problem

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.6.0
• Component/s: Utilities
• Environment: Operating System: FreeBSD; Platform: All
• Bugzilla Id: 27769
• Assignee: Unassigned
• Reporter: Bjoern A. Zeeb
• Created: 18/Mar/04 19:31
• Updated: 12/Mar/18 04:06
• Resolved: 23/Jul/04 16:07

Description

for TRANSCODER==IconvFBSD there has beena bug that transcode()
did return an (almost) empty string depending on input.

The original string was properly terminated and another \0 has been
written at an "invalid" offset; offset is always < strlen() so this
is no exploitable problem I think but simply generates wrong results.

Reported-By: Sean McNeil <sean at mcneil.com>