When looking up environment variables, boost process assumes the keys are of equal size
未关闭
- 主要语言
- C++
- 星标
- 145
- 派生
- 151
- PR 合并指标
- 30 天内没有已合并 PR
描述
This causes a heap-buffer-overflow detected by ASAN
https://godbolt.org/z/Eno9r737M
https://github.com/boostorg/process/blob/develop/include/boost/process/environment.hpp#L263-L269
贡献指南
这个仓库没有索引到贡献指南
调研方向
Start with include/boost/process/environment.hpp around lines 263-269 and reproduce the heap-buffer-overflow using the linked Godbolt ASAN example. Trace the environment-variable lookup with keys of unequal sizes. Done means the lookup no longer triggers the reported overflow under ASAN.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- cpp
- 领域
- operating-systems
- Issue 类型
- 缺陷
- 难度
- 3/5
- 预计耗时
- 1-2 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 42/100