kernel32: Avoid two potential buffer overflows of cStr in create_hardware_branch.

Sebastian Lackner sebastian at fds-team.de
Sun Oct 9 12:01:49 CDT 2016


On 08.10.2016 22:31, Gerald Pfeifer wrote:
> +    char cStr[sizeof(dent->d_name)+sizeof(procname_ide_media)],

http://man7.org/linux/man-pages/man3/readdir.3.html says:

"""The standard also notes that the use of sizeof(d_name) is
incorrect; use strlen(d_name) instead.  (On some systems, this field
is defined as char d_name[1]!)"""

This means your solution will not work on all systems.




More information about the wine-devel mailing list