MantisBT - CMake
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0014488CMakeCMakepublic2013-10-16 10:162016-06-10 14:31
ReporterMatthew McCormick 
Assigned ToMatt McCormick 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionmoved 
PlatformOSOS Version
Product VersionCMake 2.8.12 
Target VersionFixed in Version 
Summary0014488: TestDriver.cxx.in Untrusted array index read
DescriptionAs reported by Coverity Scan, if the configured file contains a #include,

  Untrusted array index read
  The array index could be controlled by an attacker, leading to reads outside
  the bounds of the array.
  In main: Read from array at index computed using an unscrutinized value from
  an untrusted source (CWE-129)

  CID 1081283 (#1 of 1): Untrusted array index read (TAINTED_SCALAR)
  25. tainted_data: Using tainted variable "testToRun" as an index into an array
  "cmakeGeneratedFunctionMapEntries".
Steps To ReproduceAnalyze the ITK test suite with Coverity Static Analysis.
Additional InformationPatch attached.
TagsNo tags attached.
Relationships
Attached Filespatch 0001-TestDriver.cxx.in-Untrusted-array-index-read.patch (1,435) 2013-10-16 10:16
https://public.kitware.com/Bug/file/4906/0001-TestDriver.cxx.in-Untrusted-array-index-read.patch
Issue History
Date ModifiedUsernameFieldChange
2013-10-16 10:16Matthew McCormickNew Issue
2013-10-16 10:16Matthew McCormickFile Added: 0001-TestDriver.cxx.in-Untrusted-array-index-read.patch
2013-10-16 15:15Bill HoffmanAssigned To => Matt McCormick
2013-10-16 15:15Bill HoffmanStatusnew => assigned
2013-10-18 16:17Matthew McCormickNote Added: 0034164
2016-06-10 14:29Kitware RobotNote Added: 0042395
2016-06-10 14:29Kitware RobotStatusassigned => resolved
2016-06-10 14:29Kitware RobotResolutionopen => moved
2016-06-10 14:31Kitware RobotStatusresolved => closed

Notes
(0034164)
Matthew McCormick   
2013-10-18 16:17   
This was Resolved when the attached patch, 7eddefd8f1375c5c6f2fbe6e0e51f14bdc1f8886

however, there must be something messed with up with tho accounts -- "Matthew McCormick" is the Reporter and "Matt McCormick" is the Assigned To, and I do not have the permissions to Resolve the issue.
(0042395)
Kitware Robot   
2016-06-10 14:29   
Resolving issue as `moved`.

This issue tracker is no longer used. Further discussion of this issue may take place in the current CMake Issues page linked in the banner at the top of this page.