https://gitlab.synchro.net/main/sbbs/-/commit/0a6fdb956890d029bfdb230f
Modified Files:
src/conio/x_events.c
Log Message:
Fix crash in net_wm_state_is_cb when running GCC ASan-enabled buildCheck size of X11 property before dereferencing as an Atom.This fixes:==10203==ERROR: AddressSanitizer: heap-buffer-overflow on address0x602000065970 at pc 0x5c5834fb8812 bp 0x7819c717c220 sp 0x7819c717c218READ of size 8 at 0x602000065970 thread T2 (X11 Events) #0 0x5c5834fb8811 in net_wm_state_is_cb ../conio/x_events.c:1541But I'm not clear when nitems_return (nir) might represent > 8-bit items or howto detect that, so perhaps there's a *better* fix?
--- SBBSecho 3.20-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
|