Re: [Patch] Recent security improvements breaks proftpd

["Pierre A. Humblet" <pierre at phumblet dot no-ip dot org>]

Corinna Vinschen wrote:
> 
> On Fri, Sep 26, 2003 at 02:53:28PM +0200, Corinna Vinschen wrote:
> > Btw., shouldn't that be
> >
> >   SetTokenInformation (ptok, TokenDefaultDacl, pdacl, pAcl->AclSize)
> >                                                       ^^^^^^^^^^^^^
> >                                                     instead of sizeof(buf)?
> 
> Urgh.  What I meant was:
> 
>   sizeof *pdacl + pAcl->AclSize
> 
That makes for 3 possibilities but there is a 4th one: sizeof (* pdacl) 
(i.e. 4 bytes).
That's what a strict reading of MS would imply. I think I tried it once
(in another case) and it worked, but I never used it because it was contrary
to Cygwin tradition. 
I may also be mixing up my facts.

No problem about changing the buffer size, of course, and also #defining a constant.
Out of curiosity, have you ever seen a long default DACL?

Pierre