Subject: 24.3; Crash in cmdproxy.exe
From: Sohail Somani <[email-masked]>
To: [email-masked]
Date: Wed, 23 Apr 2014 23:58:57 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

There is a "bug" in cmdproxy.exe which should never happen, but does
anyway. In make_absolute, there is the following code:

   strncpy(dir, path, p - path);
   dir[p - path] = '\0';

If p-path > sizeof(dir), a buffer overrun occurs.

I came across this problem because I accidentally used ':' as a
separator when constructing the PATH variable in Emacs.

Thanks,

Sohail