[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1009147:



Package: cups
Version: 2.3.3

Hi.

Error message: Segmentation fault

To reproduce this bug we just need to run command "lprm -P". In normal way it must finish with output of available commands.
Technical description: Program lprm call function main(file lprm.c:30). In «if ((instance = strchr(name, '/')) != NULL)» (file lprm.c:87) when we send "-P" the program will received Segmentation fault.

System information: Linux debian 5.10.0-12-amd64 #1 SMP Debian 5.10.103-1 (2022-03-07) x86_64 GNU/Linux
libc-2.31.so


CWE identifier for this bug:
CWE-20: Improper Input Validation

Way to fix this bug: change it  "else {   i ++;   name = argv[i]; }" (file lprm.c:82-86)  to this  "i ++;   if (i >= argc)   {     _cupsLangPrintf(stderr, _("%s: Error - expected username after \"-P\" option."), argv[0]);     usage();   }".

Regards,

Tikhomirov Dmitriy

Reply to: