Skip to content

Fix buffer overflow in ffindex_from_fasta#265

Open
konstin wants to merge 1 commit into
soedinglab:masterfrom
konstin:fix-ffindex_from_fasta-buffer-overflow
Open

Fix buffer overflow in ffindex_from_fasta#265
konstin wants to merge 1 commit into
soedinglab:masterfrom
konstin:fix-ffindex_from_fasta-buffer-overflow

Conversation

@konstin

@konstin konstin commented May 4, 2021

Copy link
Copy Markdown

I could verify with valgrind that previously that this could lead to memory corruption.

Is there any suggested way to check if that has an impact on performance?

I could verify with valgrind that this previously could lead to memory corruption
@ahcm

ahcm commented Jul 30, 2021

Copy link
Copy Markdown

Mainline does not have this problem:
https://github.com/ahcm/ffindex

@konstin

konstin commented Jul 30, 2021

Copy link
Copy Markdown
Author

@ahcm What's the relation between this repository and https://github.com/ahcm/ffindex? I was under the impression that ffindex is a part of and maintained by the hh-suite

@ahcm

ahcm commented Jul 30, 2021

Copy link
Copy Markdown

I wrote FFindex as the database format for Johannes' hhblits, when we were colleagues at LMU.
So it's quite OK to package it. Unfortunately the code changes they made range from unnecessary to dangerous, introducing strange limitations and security flaws.

The switch to cmake I can understand, but think it's not worth the trouble.

To be honest, I never understood why they forked it when they left Munich.
Debian/Ubuntu uses mainline and also their hhsuite package depends on it.

So I assume all features are present in mainline. If not just file an incident on mainline GitHub.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants