diff options
| author | Ryan Liptak <squeek502@hotmail.com> | 2025-03-25 19:41:28 -0700 |
|---|---|---|
| committer | Alex Rønne Petersen <alex@alexrp.com> | 2025-03-26 10:55:18 +0100 |
| commit | 63014d3819423e8fd0990b9dfedb5eba921cb9e6 (patch) | |
| tree | 3802496b0778b7aaccb5fca2b2485a259e35d4df /lib/std/Build/Step/Run.zig | |
| parent | 2210c4c3604522ad0b07e15bc2a2d050923161c5 (diff) | |
| download | zig-63014d3819423e8fd0990b9dfedb5eba921cb9e6.tar.gz zig-63014d3819423e8fd0990b9dfedb5eba921cb9e6.zip | |
Add test to ensure the BatBadBut mitigation handles trailing `.` and space safely
Context:
- https://blog.rust-lang.org/2024/09/04/cve-2024-43402.html
- https://github.com/rust-lang/rust/pull/129962
Note that the Rust test case for this checks that it executes the batch file successfully with the proper mitigation in place, while the Zig test case expects a FileNotFound error. This is because of a PATHEXT optimization that Zig does, and that Rust doesn't do because Rust doesn't do PATHEXT appending (it only appends .exe specifically). See the added comment for more details.
Diffstat (limited to 'lib/std/Build/Step/Run.zig')
0 files changed, 0 insertions, 0 deletions