]> git.ipfire.org Git - thirdparty/vim.git/commit
ccfilter: buffer overflow in ccfilter.c with crafted compiler output
authorHirohito Higashi <h.east.727@gmail.com>
Thu, 18 Jun 2026 20:12:48 +0000 (20:12 +0000)
committerChristian Brabandt <cb@256bit.org>
Thu, 18 Jun 2026 20:12:48 +0000 (20:12 +0000)
commita092d249b6066401dda0964ceeb213062785bbc8
tree21aa464df28ca7907ba068e56d57dde9d7ceac53
parente34458465d76c2519449e1a0c27cba86afa53208
ccfilter: buffer overflow in ccfilter.c with crafted compiler output

Problem:  ccfilter: can overflow fixed-size buffers (FileName, BasePath,
          Reason) when parsing crafted compiler output, because the
          sscanf() calls read "%[" fields without a width limit (DDugs)
Solution: Give every sscanf() "%[" conversion a width limit derived from
          the buffer size (Hirohito Higashi).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Hirohito Higashi <h.east.727@gmail.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>
runtime/tools/ccfilter.c
runtime/tools/ccfilter_README.txt