[Boost-bugs] [Boost C++ Libraries] #11482: boost::uuids::string_generator accepts garbage input

Subject: [Boost-bugs] [Boost C++ Libraries] #11482: boost::uuids::string_generator accepts garbage input
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2015-07-17 18:55:55


#11482: boost::uuids::string_generator accepts garbage input
-----------------------------------+-----------------------
 Reporter: Jim King <jim.king@…> | Owner: atompkins
     Type: Bugs | Status: new
Milestone: To Be Determined | Component: uuid
  Version: Boost 1.53.0 | Severity: Problem
 Keywords: |
-----------------------------------+-----------------------
 One can pass a string in such as "01234567-89ab-cdef-0123456789abcdef-FOO"
 to boost::uuids::string_generator for construction and it will happily
 turn everything before the trailing non-guid information "-FOO" into a
 Guid, and not throw an exception. This appears to be a problem in not
 checking the end iterator at the end of operator()(iter, iter) before
 returning; at that point it should equal end(), otherwise there is garbage
 appended to the input.

 The same code exists up through boost 1.58 in the string_generator.

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/11482>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.

This archive was generated by hypermail 2.1.7 : 2017-02-16 18:50:18 UTC