[PATCH] posix: execvpe: skip $PATH components that are too long

Bruno Haible bruno@clisp.org
Tue Nov 18 10:55:34 GMT 2025


Paul Eggert wrote:
> The situation for ENAMETOOLONG is the same.

Well, in [1] I'm arguing that the situation for ENAMETOOLONG is
_not_ the same. If one ignores ENAMETOOLONG errors from earlier PATH
elements, a user's intent to hide (override) a certain program from
later PATH elements is no longer honored.

One could consider this as security relevant. CCing Florian.

Bruno

[1] https://sourceware.org/pipermail/libc-alpha/2025-November/172148.html





More information about the Libc-alpha mailing list