[Python-Dev] buffer overlow in PC/getpathp.c

Jeremy Hylton jeremy@beopen.com
Wed, 27 Sep 2000 17:10:21 -0400 (EDT)


Mark,

Would you have some time to review PC/getpathp.c for buffer overflow
vulnerabilities?  I just fixed several problems in Modules/getpath.c
that were caused by assuming that certain environment variables and
argv[0] would contain strings less than MAXPATHLEN bytes long.  I
assume the Windows version of the code could have the same
vulnerabilities.  

Jeremy

PS Is there some other Windows expert who could check into this?