libtasn1 3.1 - testfailure with -D_FORTIFY_SOURCE=2

[Andreas Metzler]

Hello,

on Debian we are building with 

-D_FORTIFY_SOURCE=2 -fstack-protector --param=ssp-buffer-size=4 -Wformat 
-Werror=format-security

libtasn1 3.1 has muliple testfailures with these buildoptions:

FAIL: Test_tree
FAIL: Test_indefinite
FAIL: crlf

(SID)address@hidden:/tmp/TASN/libtasn1-3.1/tests$ ./Test_tree
*** buffer overflow detected ***: ./Test_tree terminated
[...]
(SID)address@hidden:/tmp/TASN/libtasn1-3.1/tests$ ./Test_indefinite
*** buffer overflow detected ***: ./Test_indefinite terminated
[...]
(SID)address@hidden:/tmp/TASN/libtasn1-3.1/tests$ ./crlf
*** buffer overflow detected ***: 
/tmp/TASN/libtasn1-3.1/src/.libs/lt-asn1Decoding terminated

(gdb) bt
#0  0xf7e96667 in raise () from /lib/i386-linux-gnu/libc.so.6
#1  0xf7e99a52 in abort () from /lib/i386-linux-gnu/libc.so.6
#2  0xf7ed298d in ?? () from /lib/i386-linux-gnu/libc.so.6
#3  0xf7f554a0 in __fortify_fail () from /lib/i386-linux-gnu/libc.so.6
#4  0xf7f543fa in __chk_fail () from /lib/i386-linux-gnu/libc.so.6
#5  0xf7f53d59 in __vsnprintf_chk () from /lib/i386-linux-gnu/libc.so.6
#6  0xf7f53c44 in __snprintf_chk () from /lib/i386-linux-gnu/libc.so.6
#7  0xf7fcacb4 in snprintf (__fmt=0xf7fd7340 "%s", __n=128, __s=0xf7fdc120 "")
    at /usr/include/i386-linux-gnu/bits/stdio2.h:65
#8  _asn1_yyerror (s=<optimized out>) at ASN1.y:872
#9  0xf7fcb815 in _asn1_yyparse () at ASN1.c:2724
#10 0xf7fcd337 in asn1_parser2tree (address@hidden "Test_tree.asn",
    address@hidden, address@hidden "2") at ASN1.y:680
#11 0x08048c39 in main (argc=1, argv=0xffffd754) at Test_tree.c:472

cu andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'