From 89e435f3559c53084498e9baad22172b64429362 Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Wed, 11 Jun 2014 23:12:52 +0200 Subject: posix_spawn_file_actions_addopen needs to copy the path argument (BZ 17048) POSIX requires that we make a copy, so we allocate a new string and free it in posix_spawn_file_actions_destroy. Reported by David Reid, Alex Gaynor, and Glyph Lefkowitz. This bug may have security implications. --- posix/spawn_int.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'posix/spawn_int.h') diff --git a/posix/spawn_int.h b/posix/spawn_int.h index 5609e58..861e3b4 100644 --- a/posix/spawn_int.h +++ b/posix/spawn_int.h @@ -22,7 +22,7 @@ struct __spawn_action struct { int fd; - const char *path; + char *path; int oflag; mode_t mode; } open_action; -- cgit v1.1