In the module VMS_SUPPORT/vms_opendir(), strcpy is being used to do an overlapping copy.

Use of strcpy/strncpy for this can produce undefined results when the destination and source ranges overlap.

memmove() needs to be used for these.

Use of strcpy/strncpy can cause a buffer overrun, which in the case I have been chasing down this afternoon, overwrote the stack when built in /NOOPT/DEBUG mode.

-John
[EMAIL PROTECTED]
Personal Opinion Only

PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html

Reply via email to