[Bug 59403] New: Missing parameter validation in printf() family of functions

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=59403

            Bug ID: 59403
           Summary: Missing parameter validation in printf() family of
                    functions
           Product: Wine
           Version: 11.2
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: major
          Priority: P2
         Component: ucrtbase
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

int precision = 0x80000000; 
double val = 0; 
printf("%.*f", precision, val);

MS output: 0.000000
Wine output: lots of padding

Also affects snprintf() and alike.

Originally sighted in: FFmpeg's av_ts_make_time_string2() - I'm still figuring
out how 0x80000000 got there.

Affected apps: foobar2000, FFmpeg if built against ucrt, likely anything else
using similarly configured FFmpeg.

Confirmed on: various Linux distros, Wine 11.2

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.