From owner-freebsd-bugs@FreeBSD.ORG Thu Sep 15 04:48:49 2005 Return-Path: X-Original-To: freebsd-bugs@FreeBSD.ORG Delivered-To: freebsd-bugs@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A97B316A41F; Thu, 15 Sep 2005 04:48:49 +0000 (GMT) (envelope-from ache@nagual.pp.ru) Received: from nagual.pp.ru (nagual.pp.ru [194.87.13.69]) by mx1.FreeBSD.org (Postfix) with ESMTP id E57B743D45; Thu, 15 Sep 2005 04:48:48 +0000 (GMT) (envelope-from ache@nagual.pp.ru) Received: from nagual.pp.ru (ache@localhost [127.0.0.1]) by nagual.pp.ru (8.13.4/8.13.4) with ESMTP id j8F4mlIF027057; Thu, 15 Sep 2005 08:48:47 +0400 (MSD) (envelope-from ache@nagual.pp.ru) Received: (from ache@localhost) by nagual.pp.ru (8.13.4/8.13.4/Submit) id j8F4mlib027056; Thu, 15 Sep 2005 08:48:47 +0400 (MSD) (envelope-from ache) Date: Thu, 15 Sep 2005 08:48:47 +0400 From: Andrey Chernov To: Bruce Evans , Trevor Blackwell , freebsd-bugs@FreeBSD.ORG, FreeBSD-gnats-submit@FreeBSD.ORG Message-ID: <20050915044847.GA26955@nagual.pp.ru> Mail-Followup-To: Andrey Chernov , Bruce Evans , Trevor Blackwell , freebsd-bugs@FreeBSD.ORG, FreeBSD-gnats-submit@FreeBSD.ORG References: <1126728802.42486.3239.camel@lab> <20050915120351.Q43928@delplex.bde.org> <20050915043553.GA26630@nagual.pp.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050915043553.GA26630@nagual.pp.ru> User-Agent: Mutt/1.5.10i Cc: Subject: Re: bin/86135: Fwd: Latent buffer overflow in getcwd X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Sep 2005 04:48:49 -0000 On Thu, Sep 15, 2005 at 08:35:53AM +0400, Andrey Chernov wrote: > While it can be so for "up", it is not so for "ep", since it is > filled by __getcwd() syscall and can't be bigger. I mean common normal situation, i.e. when __getcwd() returns 0. Allocating anything else than MAXPATHLEN in that situation will be a waste. -- http://ache.pp.ru/