Closed
Description
The CreateFile and CreateNamedPipe audit events from the winapi module appear to be returning garbage instead of the names. There's potential for buffer overreads and/or information leakage.
Linked PRs
- gh-119690: Adds Unicode support for named pipes in _winapi #119717
- [3.13] gh-119690: Adds Unicode support for named pipes in _winapi (GH-119717) #119732
- [3.12] gh-119690: Adds Unicode support for named pipes in _winapi (GH-119717) #119733
- [3.11] gh-119690: Fixes buffer type confusion in _winapi.CreateNamedPipe audit event #119734
- [3.10] gh-119690: Fixes buffer type confusion in _winapi.CreateFile and _winapi.CreateNamedPipe audit events #119735
- [3.9] gh-119690: Fixes buffer type confusion in _winapi.CreateFile and _winapi.CreateNamedPipe audit events (GH-119735) #123679
- [3.8] gh-119690: Fixes buffer type confusion in _winapi.CreateFile and _winapi.CreateNamedPipe audit events (GH-119735) #123680