Re: [PATCH 01/3] msvcp110: Add tr2_sys__Open_dir implementation.(try2)

[Piotr Caban]

Hi,

On 10/15/15 06:57, YongHao Hu wrote:
> - char temppath[MAX_PATH];
> - TRACE("(%s %s %p %p)\n", debugstr_a(target), debugstr_a(dest), err_code, type);
> - if(strlen(dest) > MAX_PATH) {
> -
>    *err_code = ERROR_BAD_PATHNAME;
> -
>    return NULL;
> - }
> - strcpy(temppath, dest);
> - strcat(temppath, "\*.*");

There's still possible buffer overflow if e.g. strlen(dest)==MAX_PATH-2.

Thanks,
Piotr