We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
I found a bof in doproxyconnect() function:
doproxyconnect()
void doproxyconnect(int socket) { int x; char buf[128]; /* write CONNECT string to proxy */ sprintf((char *)&buf, "CONNECT %s HTTP/1.0\n\n", connect_str); ... }
We should use snprintf() instead of sprintf().
snprintf()
sprintf()
More:
0x555555558912 <client_accept+594> call doproxyconnect <0x555555558370> rdi: 0x6 In file: /home/h4niz/Downloads/redir-master/redir.c 868 if (connect_str) ► 869 doproxyconnect(sd); pwndbg> ni *** stack smashing detected ***: terminated
0x555555558912 <client_accept+594> call doproxyconnect <0x555555558370> rdi: 0x6
In file: /home/h4niz/Downloads/redir-master/redir.c 868 if (connect_str) ► 869 doproxyconnect(sd);
pwndbg> ni *** stack smashing detected ***: terminated
The text was updated successfully, but these errors were encountered:
Great, would you like to do a pull request?
Sorry, something went wrong.
372c792
No branches or pull requests
I found a bof in
doproxyconnect()
function:We should use
snprintf()
instead ofsprintf()
.More:
The text was updated successfully, but these errors were encountered: