Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

idevicecrashreport.c potential buffer overflow #936

Open
jpstotz opened this issue Apr 27, 2020 · 0 comments
Open

idevicecrashreport.c potential buffer overflow #936

jpstotz opened this issue Apr 27, 2020 · 0 comments

Comments

@jpstotz
Copy link
Contributor

jpstotz commented Apr 27, 2020

If I get it correctly in idevicecrashreport.c command-line arguments are copied using strcpy into fixed-size like char target_filename[512];.

As a command-line argument can be much longer than 512 characters it may be possible to cause a buffer overflow by supplying very long command-line arguments to idevicecrashreport.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant