Ubuntu
jhead package

  1. Bug #271020
  2. Comment #3

Comment 3 for bug 271020

Revision history for this message
John Dong (jdong) wrote : Re: jhead static string for -cmd too small

I'd also like to point out that from a simple glance at jhead.c there are plenty of other security issues present, including unsafe temp file creation, other routines calling DoCommand, more unchecked buffers, shell escapes, unsafe buffer sized strcat's in ModifyDescriptComment, and so on. This whole codebase needs a review/rewrite.