30 Oct
2015
30 Oct
'15
3:08 p.m.
On 10/29/15 16:28, YongHao Hu wrote:
+ char temppath[MAX_PATH+1]; + TRACE("(%p %s %p %p)\n", target, debugstr_a(dest), err_code, type); + if(strlen(dest) >= MAX_PATH) { + *err_code = ERROR_BAD_PATHNAME; + return NULL; + } + strcpy(temppath, dest); + strcat(temppath, "\\*"); There may still write outside of temppath array in this code.
Thanks, Piotr