[Bug libc/323] New: missing NULL pointer check in s(n)printf

[Bug libc/323] New: missing NULL pointer check in s(n)printf

[g dot tenchio at telco-tech dot de]

Try the following:

void main() {
  sprintf((char)0,"Goodbye\n");
}

Result: core dump
Expected: nothing

Simply a missing NULL pointer check?

Fedora Core II
glibc-2.3.3-27

-- 
           Summary: missing NULL pointer check in s(n)printf
           Product: glibc
           Version: 2.3.3
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
        AssignedTo: gotom at debian dot or dot jp
        ReportedBy: g dot tenchio at telco-tech dot de
                CC: glibc-bugs at sources dot redhat dot com
  GCC host triplet: i686-redhat-linux


http://sources.redhat.com/bugzilla/show_bug.cgi?id=323

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/323] missing NULL pointer check in s(n)printf

[jakub at redhat dot com]

------- Additional Comments From jakub at redhat dot com  2004-08-13 12:14 -------
No, it is not necessary.  ISO C99 says the first argument of sprintf is an array,
not just any pointer.  NULL pointer is not a valid array, so this is undefined
behaviour.  So segfaulting is completely valid behaviour for this.
If you call strlen (NULL), it will segfault the same.

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID


http://sources.redhat.com/bugzilla/show_bug.cgi?id=323

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.