Hi!
Wednesday, 05 September, 2001 Christopher Faylor [EMAIL PROTECTED] wrote:
ok, i've reproduced something similar and i believe i know the reason.
in my case set_nt_attribute is called with alloca()ed buffer of size
256, but actual security descriptor is 268 bytes long. Bang. Stack
corrupted. This is a workaround, though i think alloc_sd should check
buffer size, but i cannot produce a patch for this right now.
hopefully, 4k is enough for any sd. And yes, i think it's a
show-stopper.
Egor. mailto:[EMAIL PROTECTED] ICQ 5165414 FidoNet 2:5020/496.19
alloca-fix.diff
alloca-fix.ChangeLog
