grbgooglefan wrote:

>         char* plevel = NULL;
>         if(NULL != (plevel = PyString_AsString(pResult))){
>           ret = 0;
>           strncpy(szEvalResult,plevel,strlen(plevel));

strncpy doesn't check the size of the target buffer, so that's no 
different from just doing strcpy(szEvalResult, plevel).  or in other 
words, it's still trivial to crash your program simply by returning
too much data from the Python code.

</F>

-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to