Hello, The pcsc_stringify_error function in the PC/SC-Lite implementation uses a statically allocated buffer. This means that the buffer may be used simultaneously when the function is called from multiple threads concurrently. Therefore, the returned message may be spoiled, e.g.: "Internal error.ul" or "Command cancell" In the worst-case scenario, the application may read an unbounded string (with the terminating null character missing).
One possible solution would be to return addresses derived from the string literals directly. However, this won't support the dynamic message formatting, which is currently performed for unknown error codes (though this arguably doesn't look like a vital feature). Regards, Maksim _______________________________________________ Pcsclite-muscle mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pcsclite-muscle
