Pidgin 2.10.7 - two issues

Mark Doliner mark at kingant.net
Sun Jan 12 20:52:48 EST 2014


On Wed, Jul 17, 2013 at 3:05 PM, Lukas Odzioba <lukas.odzioba at gmail.com> wrote:
> finch/libgnt/gntwm.c: 997: - null pointer dereference
> len = wcstombs(NULL, wide, 0) + 1;
>
> First arg should not be NULL it is "dest".

Actually I think the code is correct. From the man page it looks like
dest is allowed to be NULL. In this case no conversation happens. This
is used to calculate the number of bytes needed for the conversion.

> libpurple/protocols/msn/directconn.c:49 - reduced etropy

As mentioned a few months ago, this was fixed in our release-2.x.y
branch (https://hg.pidgin.im/pidgin/main/rev/502a383ea856) and will go
out in the next release, which should happen in about two weeks.

Thanks!


More information about the security mailing list