[Bug libc/13446] New: crash in vfprintf with more than 64 format args and format specifiers

["rcoe at wi dot rr.com" <sourceware-bugzilla@sourceware.org>]

http://sourceware.org/bugzilla/show_bug.cgi?id=13446

             Bug #: 13446
           Summary: crash in vfprintf with more than 64 format args and
                    format specifiers
           Product: glibc
           Version: 2.14
               URL: https://bugzilla.novell.com/show_bug.cgi?id=733140
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
        AssignedTo: drepper.fsp@gmail.com
        ReportedBy: rcoe@wi.rr.com
    Classification: Unclassified


Created attachment 6077
  --> http://sourceware.org/bugzilla/attachment.cgi?id=6077
testcase

A user found this in an application that uses format specifiers and
motif was initializing.

Program received signal SIGSEGV, Segmentation fault.
0x0000000000000000 in ?? ()
(gdb) bt
#0  0x0000000000000000 in ?? ()
#1  0x00007ffff7a91ec8 in _IO_vfprintf_internal (s=<optimized out>,
format=<optimized out>, ap=<optimized out>)
    at vfprintf.c:1739
#2  0x00007ffff7ab5024 in __IO_vsprintf (string=0x603020 "", 
    format=0x601080
"%%P%%S:%s/%%L/%%T/%%N/%%P%%S:%s/%%l_%%t/%%T/%%N/%%P%%S:%s/%%l/%%T/%%N/%%P%%S:%s/%%T/%%N/%%P%%S:%s/%%L/%%T/%%P%%S:%s/%%l_%%t/%%T/%%P%%S:%s/%%l/%%T/%%P%%S:%s/%%T/%%P%%S:%s/%%P%%S:%s/%%L/%%T/%%N/%%P%%S:%"...,
args=0x7fffffffc6c8) at iovsprintf.c:43
#3  0x00007ffff7a9c0a7 in __sprintf (s=<optimized out>, format=<optimized out>)
at sprintf.c:34
#4  0x00000000004009d3 in main (argc=1, argv=0x7fffffffd928) at mtest.c:98

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.