|
Description
|
The function getsidname() uses snprintf() to determine how big of a buffer to allocate for a sid string, but has a small typo in the statement that can result in truncated SID strings.
len = snprintf(NULL, 0, "%s@%d", name, domain);
this should be:
len = snprintf(NULL, 0, "%s@%s", name, domain);
|