A remote code execution vulnerability in GNOME
A remote code execution vulnerability in GNOME
Posted Oct 11, 2023 18:38 UTC (Wed) by adobriyan (guest, #30858)In reply to: A remote code execution vulnerability in GNOME by rweikusat2
Parent article: A remote code execution vulnerability in GNOME
strtoul() doesn't force to check for error. Programmer who is clueless to use atoi() will write strtoul() just as easily.
And there is no strtouint() so potential for clipping the result is still there.
And there is no strtouint() so potential for clipping the result is still there.