[Boost-bugs] [Boost C++ Libraries] #11482: boost::uuids::string_generator accepts garbage input

Subject: [Boost-bugs] [Boost C++ Libraries] #11482: boost::uuids::string_generator accepts garbage input
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2015-07-17 18:55:55

#11482: boost::uuids::string_generator accepts garbage input
-----------------------------------+-----------------------
 Reporter:  Jim King <jim.king@…>  |      Owner:  atompkins
     Type:  Bugs                   |     Status:  new
Milestone:  To Be Determined       |  Component:  uuid
  Version:  Boost 1.53.0           |   Severity:  Problem
 Keywords:                         |
-----------------------------------+-----------------------
 One can pass a string in such as "01234567-89ab-cdef-0123456789abcdef-FOO"
 to boost::uuids::string_generator for construction and it will happily
 turn everything before the trailing non-guid information "-FOO" into a
 Guid, and not throw an exception.  This appears to be a problem in not
 checking the end iterator at the end of operator()(iter, iter) before
 returning; at that point it should equal end(), otherwise there is garbage
 appended to the input.

 The same code exists up through boost 1.58 in the string_generator.

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/11482>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.