[PATCH] posix: execvpe: skip $PATH components that are too long
Bruno Haible
bruno@clisp.org
Tue Nov 18 10:55:34 GMT 2025
Paul Eggert wrote:
> The situation for ENAMETOOLONG is the same.
Well, in [1] I'm arguing that the situation for ENAMETOOLONG is
_not_ the same. If one ignores ENAMETOOLONG errors from earlier PATH
elements, a user's intent to hide (override) a certain program from
later PATH elements is no longer honored.
One could consider this as security relevant. CCing Florian.
Bruno
[1] https://sourceware.org/pipermail/libc-alpha/2025-November/172148.html
More information about the Libc-alpha
mailing list