I've just published a new @hnsec #advisory that describes some buffer overflow #vulnerabilities with long path names in #TinyDir (CVE-2023-49287).

TinyDir is a lightweight, portable and easy to integrate C directory and file reader. It is a small but successful project, used in hundreds of repositories.

https://github.com/hnsecurity/vulns/blob/main/HNS-2023-04-tinydir.txt

#tinydir is a #singleheader, portable directory reader.

tinydir provides a portable interface for opening and iterating through directories, as well as getting information on files. tinydir's interface is simple, reading data into a struct which provides the name, path, extension, and whether the file is a directory or not. tinydir operates on both Windows and POSIX.

Website 🔗️: https://github.com/cxong/tinydir

#free #opensource #foss #fossmendations #programming