Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #define MEMSET_BZERO(p,l) memset((p), 0, (l))
- void apr__SHA256_Final(sha2_byte digest[],
- SHA256_CTX* context) {
- ...
- MEMSET_BZERO(context, sizeof(context));
- ...
- }
- This is what should have been written here: sizeof(*context)
- This suspicious code was found in Apache project by PVS-Studio static code analyzer.
- Warning message is:
- V512 A call of the 'memset' function will lead to underflow of the buffer '(context)'. apr sha2.c 560
- PVS-Studio is a static analyzer for detecting bugs in the source code of applications written in C, C++, C++11, C++/CX. Site: http://www.viva64.com/en/pvs-studio/
Advertisement
Add Comment
Please, Sign In to add comment