[Bug libc/1963] argument p not checked in io/fts.c:fts_load()

heiko dot nardmann at secunet dot com sourceware-bugzilla@sourceware.org
Thu Dec 1 17:10:00 GMT 2005


------- Additional Comments From heiko dot nardmann at secunet dot com  2005-12-01 17:10 -------
The same is of course true for parameter sp. 
 
Another thing is that 'len' in this function is incorrectly declared as 'int' 
instead of 'size_t'. 
 
But what about the assignment 
 
p->fts_namelen = len; 
 
Since len is the result of strlen which is size_t (32bit) what happens with the 
remaining 16bit? u_short (which is the type of fts_namelen) is only 16bit. 
 

-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=1963

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.



More information about the Glibc-bugs mailing list