[collectd] collectd 4.0.2 buffer clearing is csv.c and rrdtool.c does not happen...

ezra peisach epeisach at med-xtal.bu.edu
Mon Jun 18 23:24:31 CEST 2007


While reading the source code, I found the following:

In csv.c (line 44) and rrdtool.c (line 363) (value_list_to_string)
the following syntax exists:

  memset (buffer, '\0', sizeof (buffer_len));

The sizeof should be removed - assuming that the desire is to
zero the buffer and not the first four (sizeof(int)) bytes.

Based on the code paths - I do not see an information leak - or any 
security implications...

Ezra







More information about the collectd mailing list