John E. Malmberg wrote:

In the module VMS_SUPPORT/vms_opendir(), strcpy is being used to do an overlapping copy.

Use of strcpy/strncpy for this can produce undefined results when the destination and source ranges overlap.

memmove() needs to be used for these.

Just found the same bug in cvt_filespec/pw6_encode(). In this case it did not seem to cause a noticable buffer overrun.

And the bug is also in vms_stat/vms_stat() in two places.

-John
[EMAIL PROTECTED]
Personal Opinion Only

PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html

Reply via email to