Summary

Buffer overflow in file_info_2

Metadata

• Id: a12f38dbf5f51bbf0e85c3be9aa6a7844258cbbe
• Trac id: 61
• Type: defect
• Reporter: zbigniew
• Owner:
• Cc:
• Status: closed
• Component: core libraries
• Estimated difficulty:
• Resolution: fixed
• Priority: major
• Milestone:
• Version: 4.1.x
• Changetime: 2009-07-31 22:08:35 UTC
• Created: 2009-07-31 06:29:24 UTC
• Keywords:

Attachments

• a12f38dbf5f51bbf0e85c3be9aa6a7844258cbbe/attachments/file_info_overflow.diff.txt

Description

 #;> (file-exists? (list->string (map (lambda (x) #\a) (iota 4135))))
 Segmentation fault (core dumped)

Patch attached. Also fixes a couple other overflows in Win32 code and adds a safety check for fmode size (which should never overflow, but...)

Changes and comments

[2009-07-31 06:29:46 UTC] zbigniew attached file_info_overflow.diff.txt (description=#f)

[2009-07-31 22:08:35 UTC] felix changed status from new to closed

[2009-07-31 22:08:35 UTC] felix set resolution to fixed

[2009-07-31 22:08:35 UTC] felix wrote:

Patch applied in r15292. Danke.