Security vulnerabilities and automated fixes for musl libc issues
1 post found
A high-severity buffer overflow vulnerability was discovered and patched in a custom musl libc implementation used within a Zig toolchain, where the `tmpnam()` function used the unsafe `strcpy()` to copy temporary file names without any bounds checking. This classic CWE-120 flaw could allow attackers to corrupt memory by overflowing destination buffers, potentially leading to arbitrary code execution. The fix replaces the unbounded copy with a size-aware alternative, eliminating the risk of stac