CVE-2025-66877: libming dcputchar函数缓冲区溢出漏洞

#include <stdio.h> #include <string.h> #include <stdlib.h> // Simulated vulnerable dcputchar function (demonstration only) void dcputchar_vulnerable(char* input) { char buffer[64]; // Vulnerable: no bounds checking on input length strcpy(buffer, input); } // Safe version with proper bounds checking void dcputchar_safe(char* input, size_t max_len) { char buffer[64]; // Safe: use strncpy with proper length limit strncpy(buffer, input, max_len - 1); buffer[max_len - 1] = '\0'; } int main() { // Create oversized input to trigger buffer overflow char* malicious_input = malloc(256); memset(malicious_input, 'A', 255); malicious_input[255] = '\0'; printf("Testing vulnerable function with %zu byte input\n", strlen(malicious_input)); // This would trigger the vulnerability // dcputchar_vulnerable(malicious_input); // UNSAFE // Use safe version instead dcputchar_safe(malicious_input, sizeof(malicious_input)); free(malicious_input); return 0; }