[drmingw] security issues with exchndl.dll

hwms / jrfonseca

Automatically exported from code.google.com/p/jrfonseca

0 stars 0 forks source link

[drmingw] security issues with exchndl.dll #73

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago

We've discovered some likely security issues with exchndl.dll:

* unsafe use of LoadLibrary()
* a possible stack overflow in rprintf()
* the use and misuse of lstrncpy()
* unsafe _tcsrchr() usage
* other miscellaneous issues

Here is the original bug about exchndl.dll:
http://developer.pidgin.im/ticket/15289

Here is the context for that bug:
http://developer.pidgin.im/ticket/15286

Original issue reported on code.google.com by ioer...@gmail.com on 26 Aug 2012 at 9:16

GoogleCodeExporter commented 9 years ago

 I also believe that I've addressed the issues identified here in the following commits to a forked repo: 
http://hg.pidgin.im/util/drmingw/rev/005749a4d596
http://hg.pidgin.im/util/drmingw/rev/b17553e9dc94

Original comment by daniel.a...@gmail.com on 10 Sep 2012 at 6:07

GoogleCodeExporter commented 9 years ago

Original comment by Jose.R.F...@gmail.com on 8 Apr 2013 at 5:50

Changed title: [drmingw] security issues with exchndl.dll