[Pidgin] #9801: Crash in zephyr protocol file in function ZGetVariable() with long file names

Pidgin trac at pidgin.im
Wed Jul 29 23:33:59 EDT 2009


#9801: Crash  in zephyr protocol file in function ZGetVariable() with long file
names
------------------------------------+---------------------------------------
 Reporter:  msb333                  |        Owner:  seanegan
     Type:  defect                  |       Status:  closed  
Milestone:  2.6.0                   |    Component:  Zephyr  
  Version:  2.5.8                   |   Resolution:  fixed   
 Keywords:  crash, buffer-overflow  |  
------------------------------------+---------------------------------------
Changes (by qulogic at pidgin.im):

  * status:  new => closed
  * resolution:  => fixed
  * milestone:  => 2.6.0


Comment:

 (In [e3a225bac3670fe4105e163d68c910550a39b7e0]):[[BR]]
 Don't use a static buffer to hold a full filename, since it could possibly
 overflow depending on where someone's config directory is.
 This Zephyr code is as old as I am, but looks like oh-my-God-what's-wrong-
 with-that.

 Fixes #9801.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/9801#comment:2>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list