Re: FYI: windows opendir/readdir issue

[Bob Friesenhahn]

On Sat, 18 Dec 2004, Ralf Wildenhues wrote:

> Attachment #1 already applied to branch-1.5.  It fixes a read past end
> of buffer and a couple of write past end of buffer in the opendir and
> readdir replacement functions used on windows only (cygwin, mingw).

Usage is actually more limited than that.  These functions should 
not be used under Cygwin since Cygwin provides the functions itself. 
If they are used under Cygwin then there is a bug.

> Since only a constant string is allowed to be written, it seems very
> unlikely to be useful as an attack vector, even in the very unlikely
> setup that the search path environment variables and similar data are
> actually not trusted.  Not that Libtool ever guaranteed to be usable
> for such a setup anyway.
>
> OK to apply attachment #2 to branch-2-0 and HEAD (will do so tomorrow
> unless anybody complains)?

Yes.

Bob
======================================
Bob Friesenhahn
address@hidden
http://www.simplesystems.org/users/bfriesen