In the area of code where changes for this was made, there is:

char fname[255];
/* XXX What happens if len(mutex_dir) > 255 - len(mpmtx%d%d)? */
snprintf(fname, 255, "%s/mpmtx%d%d", mutex_dir,
glb->parent_pid, n);

The value 255 should really be MAXPATHLEN macro. On UNIX platforms,
it is often 1024 or 4096 from memory.

This is defined in <sys/param.h> system header file on UNIX systems.

Two places in src/mod_python.c where this occurs.

This would at least be a bit safer than 255.

Graham

On 12/03/2006, at 8:45 AM, Jim Gallacher (JIRA) wrote:

>      [ http://issues.apache.org/jira/brows...ON-131?page=all ]
>
> Jim Gallacher resolved MODPYTHON-131:
> -------------------------------------
>
>     Fix Version: 3.3
>      Resolution: Fixed
> 
> 
>
> --
> This message is automatically generated by JIRA.
> -
> If you think it was sent incorrectly contact one of the administrators:
>    http://issues.apache.org/jira/secur...nistrators.jspa
> -
> For more information on JIRA, see:
>    http://www.atlassian.com/software/jira

[ Post a follow-up to this message ]