search

DamoSWL / 8000_Shell

project 1 written in C/C++ in 8000
Apache License 2.0
0 stars 0 forks source link

String Handling #19

Open cbritt0n opened 3 years ago

cbritt0n commented 3 years ago

Project: Shell Report By: Team Green

Vulnerability Type: String Handling

Analysis Method Used: flaw finder

Vulnerability Description: g++-9 ~/CSCI8000/Shell/function.cpp:561 strlen: Does not handle strings that are not \0-terminated It may perform an over-read