4 ms·
It's a bug for sure, but I think whether it's a security issue could depend on the language. If the callee is able to determine the length of the array, it can
by michaelmior 2y ago
It's a bug for sure, but I think whether it's a security issue could depend on the language. If the callee is able to determine the length of the array, it can just return an error instead of a potential buffer overrun.