Re: Security bug in ShellExecuteEx()

2004-04-09 Thread Martin Fuchs
On 09.04.2004 17:15:49 Francois Gouget wrote: > Well, it's actually worst than that. Just before we have this code: > > if (wszCommandline[0]) { > strcatW(wszApplicationName, wSpace); > strcatW(wszApplicationName, wszCommandline); > } > ... > /* Else, try to find t

Re: Security bug in ShellExecuteEx()

2004-04-09 Thread Francois Gouget
Hi Micheal, Michael Stefaniuc wrote: Hello, On Fri, Apr 09, 2004 at 02:14:10AM +0200, Francois Gouget wrote: Index: dlls/shell32/shlexec.c === RCS file: /var/cvs/wine/dlls/shell32/shlexec.c,v retrieving revision 1.40 diff -u -r1.40

Re: Security bug in ShellExecuteEx()

2004-04-09 Thread Michael Stefaniuc
Hello, On Fri, Apr 09, 2004 at 02:14:10AM +0200, Francois Gouget wrote: > Index: dlls/shell32/shlexec.c > === > RCS file: /var/cvs/wine/dlls/shell32/shlexec.c,v > retrieving revision 1.40 > diff -u -r1.40 shlexec.c > --- a/dlls/shell3