Buggy fmemopen
lumumba
a37fce657@yahoo.com
Tue Feb 22 10:13:00 GMT 2011
This function causes SIGSEGV when it's called with buf == NULL. Also it
returns EINVAL with mode != "a".
It appears it wasn't tested with buf == NULL at all:
fmemopen.c:309
if (!buf)
{
/* r+/w+/a+, and no buf: file starts empty. */
c->buf = (char *) (c + 1);
*(char *) buf = '\0'; // Should be c->buf?
c->pos = c->eof = 0;
c->append = (flags & __SAPP) != 0;
}
This condition looks strange:
fmemopen.c:284
if (!size || !(buf || flags & __SAPP)) // Why?
{
ptr->_errno = EINVAL;
return NULL;
}
--
View this message in context: http://old.nabble.com/Buggy-fmemopen-tp30984430p30984430.html
Sent from the Cygwin list mailing list archive at Nabble.com.
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
More information about the Cygwin
mailing list