Re: [Boost-bugs] [Boost C++ Libraries] #11482: boost::uuids::string_generator accepts garbage input

Subject: Re: [Boost-bugs] [Boost C++ Libraries] #11482: boost::uuids::string_generator accepts garbage input
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2015-07-17 21:30:25

#11482: boost::uuids::string_generator accepts garbage input
------------------------------------+-----------------------
  Reporter:  Jim King <jim.king@…>  |      Owner:  atompkins
      Type:  Bugs                   |     Status:  new
 Milestone:  To Be Determined       |  Component:  uuid
   Version:  Boost 1.53.0           |   Severity:  Problem
Resolution:                         |   Keywords:
------------------------------------+-----------------------

Comment (by Jim King <jim.king@…>):

 Here's a patch that resolves the issue:
 {{{
 --- a/boost/uuid/string_generator.hpp
 +++ b/boost/uuid/string_generator.hpp
 @@ -104,6 +104,11 @@ struct string_generator {
              check_close_brace(c, open_brace_char);
          }

 +        // Boost Trac 11482 - detect trailing garbage or unexpected data
 +        if (begin != end) {
 +            throw_invalid();
 +        }
 +
          return u;
      }
 }}}

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/11482#comment:1>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.