...
First, the function incorrectly validates the index pos against the size of the buffer. When the index pos is initially equal to size, the function attempts to store value in a memory location just past the end of the buffer.
...
Page History
Overview
Content Tools