From unknown Fri Aug 15 17:21:45 2025 X-Loop: help-debbugs@gnu.org Subject: bug#17334: 24.3; Crash in cmdproxy.exe Resent-From: Sohail Somani Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 24 Apr 2014 16:38:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 17334 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 17334@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.139835745820390 (code B ref -1); Thu, 24 Apr 2014 16:38:02 +0000 Received: (at submit) by debbugs.gnu.org; 24 Apr 2014 16:37:38 +0000 Received: from localhost ([127.0.0.1]:57455 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WdMeW-0005Il-9X for submit@debbugs.gnu.org; Thu, 24 Apr 2014 12:37:37 -0400 Received: from eggs.gnu.org ([208.118.235.92]:35243) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WdAno-00058W-77 for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WdAng-0002rx-Jd for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:23 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_20,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:52720) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAng-0002rt-GP for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:16 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:36928) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAna-0002Wm-7X for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:16 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WdAnU-0002pD-0F for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:10 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:49967) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAnT-0002p3-Sl for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:03 -0400 Received: from compute5.internal (compute5.nyi.mail.srv.osa [10.202.2.45]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id E2BF320D08; Wed, 23 Apr 2014 23:58:01 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute5.internal (MEProxy); Wed, 23 Apr 2014 23:58:01 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:date:from:mime-version:to :subject:content-type:content-transfer-encoding; s=smtpout; bh=i nOYCs+g6Mxjjz/QqiB76hmsMLw=; b=V2kr9eU340vKJtHPgXm3m9WE3sbeq+cPh HZnM0/gZYZnRKeeghI2lTPfftKIF0NePBEacFWrczDDrXU1BTrJtmxCdYtQD5rOm ObLJnoVANY3seQz7ys9vyzMA33LeMYX5t/Lejnn2UifM29L+eGV5oPCq1G3abG40 afrPH9Q3pg= X-Sasl-enc: 96+Gen8R8fm9xRkHMePZ7kAsyTg6fqOmRf32/500h2x6 1398311881 Received: from [10.0.2.113] (unknown [192.171.35.38]) by mail.messagingengine.com (Postfix) with ESMTPA id B75836800D7 for ; Wed, 23 Apr 2014 23:58:01 -0400 (EDT) Message-ID: <53588C01.9070406@taggedtype.net> Date: Wed, 23 Apr 2014 23:58:57 -0400 From: Sohail Somani User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Mailman-Approved-At: Thu, 24 Apr 2014 12:37:34 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) There is a "bug" in cmdproxy.exe which should never happen, but does anyway. In make_absolute, there is the following code: strncpy(dir, path, p - path); dir[p - path] = '\0'; If p-path > sizeof(dir), a buffer overrun occurs. I came across this problem because I accidentally used ':' as a separator when constructing the PATH variable in Emacs. Thanks, Sohail From unknown Fri Aug 15 17:21:45 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.503 (Entity 5.503) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Sohail Somani Subject: bug#17334: closed (Re: bug#17334: 24.3; Crash in cmdproxy.exe) Message-ID: References: <831twkpnyw.fsf@gnu.org> <53588C01.9070406@taggedtype.net> X-Gnu-PR-Message: they-closed 17334 X-Gnu-PR-Package: emacs Reply-To: 17334@debbugs.gnu.org Date: Sat, 26 Apr 2014 07:09:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1398496142-26250-1" This is a multi-part message in MIME format... ------------=_1398496142-26250-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #17334: 24.3; Crash in cmdproxy.exe which was filed against the emacs package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 17334@debbugs.gnu.org. --=20 17334: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D17334 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1398496142-26250-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 17334-done) by debbugs.gnu.org; 26 Apr 2014 07:08:25 +0000 Received: from localhost ([127.0.0.1]:58948 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Wdwim-0006oC-Nq for submit@debbugs.gnu.org; Sat, 26 Apr 2014 03:08:25 -0400 Received: from mtaout22.012.net.il ([80.179.55.172]:37853) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Wdwij-0006o1-Gf for 17334-done@debbugs.gnu.org; Sat, 26 Apr 2014 03:08:23 -0400 Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0N4M00I00M52BN00@a-mtaout22.012.net.il> for 17334-done@debbugs.gnu.org; Sat, 26 Apr 2014 10:08:20 +0300 (IDT) Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0N4M00IUIMHV7K40@a-mtaout22.012.net.il>; Sat, 26 Apr 2014 10:08:20 +0300 (IDT) Date: Sat, 26 Apr 2014 10:08:23 +0300 From: Eli Zaretskii Subject: Re: bug#17334: 24.3; Crash in cmdproxy.exe In-reply-to: <53588C01.9070406@taggedtype.net> X-012-Sender: halo1@inter.net.il To: Sohail Somani Message-id: <831twkpnyw.fsf@gnu.org> References: <53588C01.9070406@taggedtype.net> X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 17334-done Cc: 17334-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) > Date: Wed, 23 Apr 2014 23:58:57 -0400 > From: Sohail Somani > > There is a "bug" in cmdproxy.exe which should never happen, but does > anyway. In make_absolute, there is the following code: > > strncpy(dir, path, p - path); > dir[p - path] = '\0'; > > If p-path > sizeof(dir), a buffer overrun occurs. > > I came across this problem because I accidentally used ':' as a > separator when constructing the PATH variable in Emacs. Thanks, this is now fixed for Emacs 24.4 (revision 117021 on the emacs-24 branch). ------------=_1398496142-26250-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 24 Apr 2014 16:37:38 +0000 Received: from localhost ([127.0.0.1]:57455 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WdMeW-0005Il-9X for submit@debbugs.gnu.org; Thu, 24 Apr 2014 12:37:37 -0400 Received: from eggs.gnu.org ([208.118.235.92]:35243) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WdAno-00058W-77 for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WdAng-0002rx-Jd for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:23 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_20,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:52720) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAng-0002rt-GP for submit@debbugs.gnu.org; Wed, 23 Apr 2014 23:58:16 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:36928) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAna-0002Wm-7X for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:16 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WdAnU-0002pD-0F for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:10 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:49967) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WdAnT-0002p3-Sl for bug-gnu-emacs@gnu.org; Wed, 23 Apr 2014 23:58:03 -0400 Received: from compute5.internal (compute5.nyi.mail.srv.osa [10.202.2.45]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id E2BF320D08; Wed, 23 Apr 2014 23:58:01 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute5.internal (MEProxy); Wed, 23 Apr 2014 23:58:01 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:date:from:mime-version:to :subject:content-type:content-transfer-encoding; s=smtpout; bh=i nOYCs+g6Mxjjz/QqiB76hmsMLw=; b=V2kr9eU340vKJtHPgXm3m9WE3sbeq+cPh HZnM0/gZYZnRKeeghI2lTPfftKIF0NePBEacFWrczDDrXU1BTrJtmxCdYtQD5rOm ObLJnoVANY3seQz7ys9vyzMA33LeMYX5t/Lejnn2UifM29L+eGV5oPCq1G3abG40 afrPH9Q3pg= X-Sasl-enc: 96+Gen8R8fm9xRkHMePZ7kAsyTg6fqOmRf32/500h2x6 1398311881 Received: from [10.0.2.113] (unknown [192.171.35.38]) by mail.messagingengine.com (Postfix) with ESMTPA id B75836800D7 for ; Wed, 23 Apr 2014 23:58:01 -0400 (EDT) Message-ID: <53588C01.9070406@taggedtype.net> Date: Wed, 23 Apr 2014 23:58:57 -0400 From: Sohail Somani User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: bug-gnu-emacs@gnu.org Subject: 24.3; Crash in cmdproxy.exe Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Thu, 24 Apr 2014 12:37:34 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) There is a "bug" in cmdproxy.exe which should never happen, but does anyway. In make_absolute, there is the following code: strncpy(dir, path, p - path); dir[p - path] = '\0'; If p-path > sizeof(dir), a buffer overrun occurs. I came across this problem because I accidentally used ':' as a separator when constructing the PATH variable in Emacs. Thanks, Sohail ------------=_1398496142-26250-1--