From debbugs-submit-bounces@debbugs.gnu.org Thu Apr 24 12:37:38 2014 Received: (at submit) by debbugs.gnu.org; 24 Apr 2014 16:37:38 +0000 Received: from localhost ([127.0.0.1]:57455 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WdMeW-0005Il-9X for submit@debbugs.gnu.org; Thu, 24 Apr 2014 12:37:37 -0400 Received: from eggs.gnu.org ([208.118.235.92]:35243) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WdAno-00058W-77 for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WdAng-0002rx-Jd for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:23 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_20,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:52720) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAng-0002rt-GP for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:16 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:36928) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAna-0002Wm-7X for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:16 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WdAnU-0002pD-0F for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:10 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:49967) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAnT-0002p3-Sl for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:03 -0400 Received: from compute5.internal (compute5.nyi.mail.srv.osa [10.202.2.45]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id E2BF320D08; Wed, 23 Apr 2014 23:58:01 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute5.internal (MEProxy); Wed, 23 Apr 2014 23:58:01 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:date:from:mime-version:to :subject:content-type:content-transfer-encoding; s=smtpout; bh=i nOYCs+g6Mxjjz/QqiB76hmsMLw=; b=V2kr9eU340vKJtHPgXm3m9WE3sbeq+cPh HZnM0/gZYZnRKeeghI2lTPfftKIF0NePBEacFWrczDDrXU1BTrJtmxCdYtQD5rOm ObLJnoVANY3seQz7ys9vyzMA33LeMYX5t/Lejnn2UifM29L+eGV5oPCq1G3abG40 afrPH9Q3pg= X-Sasl-enc: 96+Gen8R8fm9xRkHMePZ7kAsyTg6fqOmRf32/500h2x6 1398311881 Received: from [10.0.2.113] (unknown [192.171.35.38]) by mail.messagingengine.com (Postfix) with ESMTPA id B75836800D7 for ; Wed, 23 Apr 2014 23:58:01 -0400 (EDT) Message-ID: <53588C01.9070406@taggedtype.net> Date: Wed, 23 Apr 2014 23:58:57 -0400 From: Sohail Somani User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: bug-gnu-emacs@gnu.org Subject: 24.3; Crash in cmdproxy.exe Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Thu, 24 Apr 2014 12:37:34 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) There is a "bug" in cmdproxy.exe which should never happen, but does anyway. In make_absolute, there is the following code: strncpy(dir, path, p - path); dir[p - path] = '\0'; If p-path > sizeof(dir), a buffer overrun occurs. I came across this problem because I accidentally used ':' as a separator when constructing the PATH variable in Emacs. Thanks, Sohail From debbugs-submit-bounces@debbugs.gnu.org Sat Apr 26 03:08:25 2014 Received: (at 17334-done) by debbugs.gnu.org; 26 Apr 2014 07:08:25 +0000 Received: from localhost ([127.0.0.1]:58948 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Wdwim-0006oC-Nq for submit@debbugs.gnu.org; Sat, 26 Apr 2014 03:08:25 -0400 Received: from mtaout22.012.net.il ([80.179.55.172]:37853) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Wdwij-0006o1-Gf for 17334-done@debbugs.gnu.org; Sat, 26 Apr 2014 03:08:23 -0400 Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0N4M00I00M52BN00@a-mtaout22.012.net.il> for 17334-done@debbugs.gnu.org; Sat, 26 Apr 2014 10:08:20 +0300 (IDT) Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0N4M00IUIMHV7K40@a-mtaout22.012.net.il>; Sat, 26 Apr 2014 10:08:20 +0300 (IDT) Date: Sat, 26 Apr 2014 10:08:23 +0300 From: Eli Zaretskii Subject: Re: bug#17334: 24.3; Crash in cmdproxy.exe In-reply-to: <53588C01.9070406@taggedtype.net> X-012-Sender: halo1@inter.net.il To: Sohail Somani Message-id: <831twkpnyw.fsf@gnu.org> References: <53588C01.9070406@taggedtype.net> X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 17334-done Cc: 17334-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) > Date: Wed, 23 Apr 2014 23:58:57 -0400 > From: Sohail Somani > > There is a "bug" in cmdproxy.exe which should never happen, but does > anyway. In make_absolute, there is the following code: > > strncpy(dir, path, p - path); > dir[p - path] = '\0'; > > If p-path > sizeof(dir), a buffer overrun occurs. > > I came across this problem because I accidentally used ':' as a > separator when constructing the PATH variable in Emacs. Thanks, this is now fixed for Emacs 24.4 (revision 117021 on the emacs-24 branch). From unknown Thu Aug 14 21:56:20 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sat, 24 May 2014 11:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator