Hello!
During the static analysis was found possible overflow. In file SQLDriversW.c:323-324 used sprintf(). But size of buffer is 1024+1, size of szPropertyName is 1000+1 and size of szValue is 1000+1. The same situation in SQLDrivers.c:399-400. Could there be a situation where the buffer[1024+1] contains a dimension of 1000+1000, which will lead to an overflow?
Hello!
During the static analysis was found possible overflow. In file SQLDriversW.c:323-324 used sprintf(). But size of buffer is 1024+1, size of szPropertyName is 1000+1 and size of szValue is 1000+1. The same situation in SQLDrivers.c:399-400. Could there be a situation where the buffer[1024+1] contains a dimension of 1000+1000, which will lead to an overflow?