Re: [PATCH 0/1] MR2472: Draft: CommandLineToArgvW: fixed vulnerability by incorrect parsing

[Sergey G. Brester (＠sebres)]

On Wed Mar 22 20:28:02 2023 +0000, Sergey G. Brester wrote:
> So CI is ready and as expected several tests failed.
> At first glance they look artificial, for instance testing the first on
> Windows show:
> ```
> > python three"""quotes next
> > python: can't open file 'three"quotes next': [Errno 22] Invalid argument
> > python -c "from sys import argv; del argv[0]; print(str(len(argv)) + '
> > | ' + ' | '.join(argv))" three"""quotes next
> > 1 | three"quotes next
> whereas the test assumes 2 parameters: `three"quotes` and `next` instead
> of `three"quotes next` (+ 1 for exe-name).
> I'll check all failing tests against default windows notation and adjust
> the tests accordingly.
> OK, the tests look good if one try it with a small exe using `CommandLineToArgvW` on windows.
> It only deviates from whatever script lang I tried to use.

-- 
https://gitlab.winehq.org/wine/wine/-/merge_requests/2472#note_27651