google / kernel-sanitizers

Linux Kernel Sanitizers, fast bug-detectors for the Linux kernel
https://google.github.io/kernel-sanitizers/
442 stars 87 forks source link

no limitation for "%s" while calling scanf() #198

Closed QiAnXinCodeSafe closed 4 years ago

QiAnXinCodeSafe commented 4 years ago

https://github.com/google/ktsan/blob/a10c022bba7570ab0cab2f81017b4275a7056009/arch/s390/tools/gen_opcode_table.c#L158

Field width in scanf format string may case overflow