DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 63LJZSWc1648493 Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 63LJZSWc1648493 Authentication-Results: delorie.com; dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=kt6Enrdz X-Recipient: archive-cygwin AT delorie DOT com DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 8D2194BA23F9 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; s=default; t=1776800126; bh=gmLD+lYFzx/Fzu7TmKD3lOVaSBn46ySH0Ib9C7swGOU=; h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc: From; b=kt6EnrdzHJDrKMskev1MMeHi8bDwO8CJPf4mqnWoz56wfRxz7oP0X2riNF4w5ZeiZ WmOHc3jM7ixbcJt+1QnN8vHJYk+/XLhvPAatGB9Ze65hCwrV10cRcbX0mo2nTDfSvX tzqULveFlB7RierSHC+ig4nfhUSusYi7+Y5K5Cwo= X-Original-To: cygwin AT cygwin DOT com Delivered-To: cygwin AT cygwin DOT com DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org E297F4BA23DF ARC-Filter: OpenARC Filter v1.0.0 sourceware.org E297F4BA23DF ARC-Seal: i=2; a=rsa-sha256; d=sourceware.org; s=key; t=1776800108; cv=pass; b=o6sYAMViYhVxLuBDa0JqysSjHC7+mu1ztUhVXmES6r6kFFwycGVnAcW1kH6Er9wMTWdkS9qJk8Xz+vt1j9EfUUBNE9VuThLlBfOS+ObST6IBsYVifCyHri9UpfTm6jHTemd7MhKYLaJbEb8V9A9Ze8WwvHKKPvWpcXKjQOoCPMo= ARC-Message-Signature: i=2; a=rsa-sha256; d=sourceware.org; s=key; t=1776800108; c=relaxed/simple; bh=PSyKor2smErOQyYBCgJHUvUXN5PlSTyoWMWY/+eC//8=; h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To; b=qhbxHrF6mPeycE9SGcBZ9Lh9uDjexhW7ClXgd3Ov8x+NX7VupMTBlL2iabeNzn6UBkVLRKoXg/UVURGZLtWS5abYNxGsNHX+6vnkT8KNhi7193F+hVuUt318y6uwmmaNGq80Oj6HP+c2gxKj3K0sUrczPNrsNNqwNGaXQ0B6EjE= ARC-Authentication-Results: i=2; server2.sourceware.org DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org E297F4BA23DF ARC-Seal: i=1; a=rsa-sha256; t=1776800107; cv=none; d=google.com; s=arc-20240605; b=Ra/L5vONNPyBxbuMwVmHRd3C2eqsN3+5aIPWXWIjUehXX1abJA2THkj97LDlVmW8H3 Ivj6csgW87u31hL39U+/hxrAQM2NoiniX06HfMeSLA0JwQ4zUJHapohOOg0U9t92cbDt 7rsL2a2gYtbBy9AnOPzXavh+tNS3cuCGIHn/qJHNswjVf8zqpJcxHgeLf4bJDdJZ4mSk hzspOJx+Xgr/U0ZuzXImHRMGegiCK/Iuh7NHm2AQGC8sjCW/QXrl5U9ZZKFaBf3ydZO2 imST+kPH5Q+GCmY8hw+fBXH3OsnZlVyrvqMJ2xXSyTqEIOicTa3dXUGQjE40ZeaSvMBT mRJA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:dkim-signature; bh=PSyKor2smErOQyYBCgJHUvUXN5PlSTyoWMWY/+eC//8=; fh=aMnbuBek7KCdkNFWnER3KJRPJu+dCdC9+WrpFQfKO4k=; b=lMtTiJQ3ajOne8zu0RfS3RSjft3FvN0LGkC2EMWKUK0XJ3tYwz/OPgezNpxcoTKu1D Tk86E0XyE444qpclv7JSoluVq/eE8wxr+snLf/6igoMhDaGKLdZv+AXmnXCxJJJ3Ho9n AqwcfB9M1hj4xftLzHklRoVqQx9o7x42utVW9CcFZGb5ATjwf3Rr/Y+4Lp9N+yYxnvjL FZzmLoSDxozpZ568M3+4EaNR4ZNDXmBLdrMAEUI7ahIWi5ZSRbhrav7TkeFCJs3xMtFc wdcJEq/JXAVxEUrSdI4PhnuKcH/RV5ArTHgefj6FMbI0nzXOso+i8B7fB6aTcsDKDlez 5iUQ==; darn=cygwin.com ARC-Authentication-Results: i=1; mx.google.com; arc=none X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776800107; x=1777404907; h=to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=PSyKor2smErOQyYBCgJHUvUXN5PlSTyoWMWY/+eC//8=; b=WMlhtH94QfqVfKrZLlCgqd5QJK6t0KB1/PD0FOrXSuJBZuBFZapyXxASqZ9KehEGNC TlA4U4Ffu7ibaoiSJ88XiOGTymVuJ4SG0rmJbdCEQPIFi3q+317yVkgYw14wyQNEzPus KOr1ia3oYNXARCoGwRJjVYF+p7BmgO+M2Zk5CZN9/3hwIId+LXPb+EO+sxlp5DmIPnpu Etwmhj9cfPl38Hx8iL+EyximuzuJRAK2GsMDE5xD5zkUb9mjDdr6lx4ZVKBvLmx/ymQV /Fd+mGpIXLFMak77BPr5whaSGNbdrgsgxgQ7QEaVtORG4p2lI23K3aGyj2hEmjhUxWqc onwA== X-Gm-Message-State: AOJu0Yye+KbIhiXnp+/ogBAAgwfnACSwRl2M9rEDoQpKhpByJdVzf4wz lutRpsw9s+hwN2VfJKXLv2nKp9Pq43QMdXvL+KSrNY/K9Vj5iECJA9yRNvl61YKtHUN+k55c4v2 rr9qN14I79oSI2cgf5DDw5w7dmc4p49vNhZX6 X-Gm-Gg: AeBDiev/0KjCYgeDpfQJq0uyLWeYjzRyBvR1DSBEatYmRrgsGc+RDZgPCoFYxWg/LQH ya1dGkNZrWg+hVIy89Owif70o8pfmV/0+9RiLDdhooJQMxpYykxRskLm8FaEsHjCZXYY+d2T0mp Rx/tVf95UKmW8FfQo7MZAmymesqvus1nLeYmfLuoFuJko/LqJR3MbxcU2pNpRPnZyZ5HJ7qD+cb QYqtIo+5fI5g24VkHpVQo+Ew2vtTetZZMaUMnGG23CziVr3J+//bnBvQDZW/H2lWXLstjiEMfOQ p9Vk9fNQaucR/f2DVaGobUFihU5wlcrE5F+T/A5jtGOKRZE2+1/XOE5Mi0w7dSzcB1zqXKi8iHH 98TlBXu18kjzld9yD X-Received: by 2002:a05:690c:6e86:b0:7b6:dada:4017 with SMTP id 00721157ae682-7b9ed44e094mr147535727b3.24.1776800107092; Tue, 21 Apr 2026 12:35:07 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: Date: Tue, 21 Apr 2026 13:34:40 -0600 X-Gm-Features: AQROBzDewV4gqmJkCNHYmYWHQ8nct73v2xPZ8UFR1eMolGCWRjMMcq3jvQBw3ao Message-ID: Subject: Re: cygrunsrv CWE-428 To: "cygwin AT cygwin DOT com" X-Content-Filtered-By: Mailman/MimeDel 2.1.30 X-BeenThere: cygwin AT cygwin DOT com X-Mailman-Version: 2.1.30 List-Id: General Cygwin discussions and problem reports List-Archive: List-Post: List-Help: List-Subscribe: , From: William Stewart via Cygwin Reply-To: bstewart AT iname DOT com Cc: William Stewart Content-Type: text/plain; charset="utf-8" Sender: "Cygwin" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 63LJZSWc1648493 On Tue, Apr 21, 2026 at 12:04 PM James Warnock wrote: You are probably right. I'm not a very experienced Windows developer. I > believe MAX_PATH is a constant provided by Windows, right? So, I guess I > was thinking that was a hard limit that shouldn't be exceeded. But since > this is being written to a registry value, maybe it is okay to exceed that. > The real issue, I think, is whether the string that is quoting the executable fits in MAX_PATH. The quotation marks are there for the parser; they are not part of the file name itself. (Another way to say this: Command lines need to be quoted; paths don't[1].) The registry value for a service command is a command line, not a filename path. [Also just FYI: This mailing list prefers inline quoting rather than top-posting] Bill [1] https://devblogs.microsoft.com/oldnewthing/20070515-00/?p=26863 -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple