[Bug 48980] New: buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

Bug ID: 48980
           Summary: buffer-overflow in Open/Save dialogs
           Product: Wine
           Version: unspecified
          Hardware: x86
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: comdlg32
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

Created attachment 66956
  --> https://bugs.winehq.org/attachment.cgi?id=66956
Trace

Problem triggered using Wine for ReactOS

See ticket : https://jira.reactos.org/browse/CORE-15288

Open Notepad. Save As => type aaaaaaaa.txt 
Copy & paste "aaaaaaaaaaaaaaaaaaaaaaaaa" block
keep CTRL+V pressed (long time) until Text box is "blank".
Click on save => Crash

Same procedure with File>Open leads to same result

[Bug 48980] buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

Kyle_Katarn  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|Linux                       |other

[Bug 48980] buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

--- Comment #1 from Nikolay Sivov  ---
Probable duplicate of bug 39867.

[Bug 48980] buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

--- Comment #2 from Kyle_Katarn  ---
(In reply to Nikolay Sivov from comment #1)
> Probable duplicate of bug 39867.

Looks very similar indeed !

[Bug 48980] buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

--- Comment #3 from Kyle_Katarn  ---
Could the textbox allowed text be limited to MAX_PATH in order to avoid this
overflow ?

[Bug 48980] buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

--- Comment #4 from Kyle_Katarn  ---
Same as https://bugs.winehq.org/show_bug.cgi?id=39867 ?(In reply to Nikolay
Sivov from comment #1)
> Probable duplicate of bug 39867.

Is the proposed path validated there?

[Bug 48980] buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

Fabian Maurer  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |DUPLICATE
                 CC|                            |[e-mail]

--- Comment #5 from Fabian Maurer  ---
Marking as dupe of bug 39867

*** This bug has been marked as a duplicate of bug 39867 ***

[Bug 48980] buffer-overflow in Open/Save dialogs

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48980

Alistair Leslie-Hughes  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #6 from Alistair Leslie-Hughes  ---
Closing duplicate.