JavaScript is required to use Bungie.net

Forums

8/30/2021 1:36:07 PM
1
Note that the dll contains the word "path" at the point that most precisely describes its function. Combine that with it being a buffer overflow-related dll, and the purpose is clear - this must be a library which thunks functions that e.g. resolve incomplete file pathnames, get directory listings, etc, with the original versions just writing requested data to a pointer without a known length. The thunk functions replace those with versions that provide a known length so the OS doesn't provide more data than the size of the buffer provided by the applications programmer. All of which boils down to this only being a vulnerability to people who can already substantially alter your filesystem in places where Destiny 2 would be using these functions on the filesystem to begin with. A near-trivial concern, exploit-wise.
English

Posting in language:

 

Play nice. Take a minute to review our Code of Conduct before submitting your post. Cancel Edit Create Fireteam Post

You are not allowed to view this content.
;
preload icon
preload icon
preload icon