gabime / spdlog

Fast C++ logging library.
Other
24.3k stars 4.54k forks source link

Vulnerability detected in format.h #2699

Closed eugrin closed 1 year ago

eugrin commented 1 year ago

cpp/infiniteloop (in thirdparty/spdlog/include/spdlog/fmt/bundled/format.h

In count_separators comparison between call to expression of type unknown and num_digits of wider type int. 1964 int count = 0; 1965 auto state = initial_state(); 1966 while (num_digits > next(state)) ++count; 1967 return count; 1968 }

tt4g commented 1 year ago

Please reoepn issue in fmt project, because include/spdlog/fmt/bundled/format.h is fmt library source.

tt4g commented 1 year ago

Closed in fmt project: fmtlib/fmt#3372