ClickHouse / ClickHouse/UnixODBC
Possible overflow
Open
- Dominant language
- C
- Stars
- 1
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Hello!
During the static analysis was found possible overflow. In file SQLDriversW.c:323-324 used sprintf(). But size of buffer is 1024+1, size of szPropertyName is 1000+1 and size of szValue is 1000+1. The same situation in SQLDrivers.c:399-400. Could there be a situation where the buffer[1024+1] contains a dimension of 1000+1000, which will lead to an overflow?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.