This is the mail archive of the
java-prs@gcc.gnu.org
mailing list for the Java project.
[Bug libgcj/24170] natFilePosix.cc seems to have a security problem
- From: "pinskia at gcc dot gnu dot org" <gcc-bugzilla at gcc dot gnu dot org>
- To: java-prs at gcc dot gnu dot org
- Date: 2 Oct 2005 23:28:14 -0000
- Subject: [Bug libgcj/24170] natFilePosix.cc seems to have a security problem
- References: <bug-24170-7172@http.gcc.gnu.org/bugzilla/>
- Reply-to: gcc-bugzilla at gcc dot gnu dot org
------- Comment #3 from pinskia at gcc dot gnu dot org 2005-10-02 23:28 -------
But from the sound of this, this is a bug in readdir_r and not fully in libgcj.
Yes libgcj should be testing the return value of pathconf but I assume from
reading the man pages of pathconf and readdir_r, there should be no problem.
--
pinskia at gcc dot gnu dot org changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|[SECURITY] readdir_r |natFilePosix.cc seems to
|considered harmful |have a security problem
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=24170