delorie.com/archives/browse.cgi   search  
Mail Archives: djgpp-workers/2001/12/28/09:01:44

X-Authentication-Warning: delorie.com: mailnull set sender to djgpp-workers-bounces using -f
Date: Fri, 28 Dec 2001 15:58:13 +0200
From: "Eli Zaretskii" <eliz AT is DOT elta DOT co DOT il>
Sender: halo1 AT zahav DOT net DOT il
To: tim DOT van DOT holder AT pandora DOT be
Message-Id: <4760-Fri28Dec2001155813+0200-eliz@is.elta.co.il>
X-Mailer: emacs 21.1.50 (via feedmail 8 I) and Blat ver 1.8.9
CC: sandmann AT clio DOT rice DOT edu, djgpp-workers AT delorie DOT com
In-reply-to: <000001c18f9c$eab38bf0$d47d76d5@zastaixp>
(tim DOT van DOT holder AT pandora DOT be)
Subject: Re: UNC examples
References: <000001c18f9c$eab38bf0$d47d76d5 AT zastaixp>
Reply-To: djgpp-workers AT delorie DOT com
Errors-To: nobody AT delorie DOT com
X-Mailing-List: djgpp-workers AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com

> From: "Tim Van Holder" <tim DOT van DOT holder AT pandora DOT be>
> Date: Fri, 28 Dec 2001 13:41:05 +0100
> 
> Yep.  Just tried a little argv printing proglet, and it shows the
> \:\\foo\bar filename as passed.

Okay, that probably means that Windows system calls ignore the drive
letter when the colon is followed by a double backslash.

> We can probably use this, as long as we're sure never to pass such a
> bogus name to a program that doesn't support it

Yes, it sounds like that.

In addition, code that looks at the drive letter and actually does
something with it, will also be vulnerable to fake drive letters.

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019