Buggy fmemopen

lumumba a37fce657@yahoo.com
Tue Feb 22 10:13:00 GMT 2011


This function causes SIGSEGV when it's called with buf == NULL. Also it
returns EINVAL with mode != "a".
It appears it wasn't tested with buf == NULL at all:
fmemopen.c:309
 if (!buf)
 {
 /* r+/w+/a+, and no buf: file starts empty. */
 c->buf = (char *) (c + 1);
 *(char *) buf = '0円'; // Should be c->buf?
 c->pos = c->eof = 0;
 c->append = (flags & __SAPP) != 0;
 }
This condition looks strange:
fmemopen.c:284
 if (!size || !(buf || flags & __SAPP)) // Why?
 {
 ptr->_errno = EINVAL;
 return NULL;
 }
-- 
View this message in context: http://old.nabble.com/Buggy-fmemopen-tp30984430p30984430.html
Sent from the Cygwin list mailing list archive at Nabble.com.
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple


More information about the Cygwin mailing list

AltStyle によって変換されたページ (->オリジナル) /