[Bug 20853] New: Write buffer overflow in msi/tests/automation.c?

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=20853

           Summary: Write buffer overflow in msi/tests/automation.c?
           Product: Wine
           Version: 1.1.33
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Keywords: download, source, testcase
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: wine-bugs at winehq.org
        ReportedBy: dank at kegel.com


http://kegel.com/wine/valgrind/logs/2009-11-27-12.53/vg-msi_automation.txt
has the warning
Invalid write of size 1
   at memcpy (mc_replace_strmem.c:482)
   by RtlExpandEnvironmentStrings_U (env.c:338)
   by ExpandEnvironmentStringsW (environ.c:375)
   by variant_from_registry_value (automation.c:1503)
   by InstallerImpl_Invoke (automation.c:1753)
   by AutomationObject_Invoke (automation.c:398)
   by invoke (automation.c:691)
   by Installer_RegistryValue (automation.c:745)
   by Installer_RegistryValueW (automation.c:772)
   by test_Installer_RegistryValue (automation.c:1923)
 Address 0x7f3ca4ff is 2 bytes after a block of size 5 alloc'd
   at notify_alloc (heap.c:247)
   by RtlAllocateHeap (heap.c:1697)
   by msi_alloc (msipriv.h:1078)
   by variant_from_registry_value (automation.c:1501)
   by InstallerImpl_Invoke (automation.c:1753)
   by AutomationObject_Invoke (automation.c:398)
   by invoke (automation.c:691)
   by Installer_RegistryValue (automation.c:745)
   by Installer_RegistryValueW (automation.c:772)
   by test_Installer_RegistryValue (automation.c:1923)

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.