Improper String Manipulation

DamoSWL / 8000_Shell

project 1 written in C/C++ in 8000

Apache License 2.0

0 stars 0 forks source link

Improper String Manipulation #53

Open Sumitsahu896 opened 3 years ago

Sumitsahu896 commented 3 years ago

Project: Shell Report By: Team Red

Vulnerability Type: Improper String Manipulation

Analysis Method Used: flaw finder

Vulnerability Description: g++-9 ~/CSCI8000/Shell/function.cpp:38 strlen: Does not handle strings that are not \0-terminated It may perform an over-read