The readlink() function reads where a link points to. It makes no effort to null NULL terminate its second argument, buffer. Instead, it just returns the number of characters it has written.
...
If len is equal to sizeof(buf), the null NULL terminator will be written one byte past the end of buf.
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
POS30-C | 1 (low) | 2 (probable) | 2 (medium) | P4 | L3 |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
References
| Wiki Markup |
|---|
\[[ilja 06|AA. C References#ilja 06]\] \[[Open Group 97|AA. C References#Open Group 97]\] \[[Open Group 04|AA. C References#Open Group 04]\] |