Hacker GitHub

← All repos

Hamled/mazda-format-string-bug

View on GitHub ↗ ★ 15 C

printf format string bug in Mazda Connect Infotainment System

3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2022-02-09 · latest 2022-02-09

Mentions per year 3 mentions · busiest year 2022 (3)
20082026
  1. …string "%s" as the format, instead of the untrusted string coming from the outside. [1] https://github.com/Hamled/mazda-format-string-bug#readme
  2. https://github.com/Hamled/mazda-format-string-bug#readme
  3. …at the actual bug. Via a thread the Mazda owner posted on Reddit, I found this great writeup: https://github.com/Hamled/mazda-format-string-bug#readme TLDR: The problem is the `% In`, and specifically the `%n` - when printf sees that, it…