Off-by-one error in function used in many products
leads to a buffer overflow during pathname management, as demonstrated using
multiple commands in an FTP server.
Weaknesses Addressed by the CERT C Secure Coding Standard (primary)734
Relationship Notes
This is not always a buffer overflow. For example, an off-by-one error
could be a factor in a partial comparison, a read from the wrong memory
location, an incorrect conditional, etc.
Research Gaps
Under-studied. It requires careful code analysis or black box testing,
where inputs of excessive length might not cause an error. Off-by-ones are
likely triggered by extensive fuzzing, with the attendant diagnostic
problems.
Taxonomy Mappings
Mapped Taxonomy Name
Node ID
Fit
Mapped Node Name
PLOVER
Off-by-one Error
CERT C Secure Coding
STR31-C
Guarantee that storage for strings has sufficient space for
character data and the null terminator
Description
