[ros-kernel] reactos cmd.exe crashes

[Hartmut Birr]

> -----Original Message-----
> From: ros-kernel-bounces at reactos.com 
> [mailto:ros-kernel-bounces at reactos.com] On Behalf Of Thomas 
> Weidenmueller
> Sent: Wednesday, November 19, 2003 3:30 PM
> To: ReactOS Kernel List
> Subject: Re: [ros-kernel] reactos cmd.exe crashes
> 
> 
> jeanmichel.123 at free.fr wrote:
> 
> >Running three times the rc.bat which modify environment 
> variables (PATH),
> >the cmd.exe from reactos crashes.
> >
> >It might be a buffer overflow.
> >
> >
> it's because the environment variable size is limited to 1024, see 
> ENV_BUFFER_SIZE in subsys\system\cmd\set.c
> 
> Regards
> Thomas
> 

The problem is the expanding of environment variables in ProcessInput
(cmd.c). There is no check for a valid length.

- Hartmut