[Pidgin] #9801: Crash in zephyr protocol file in function ZGetVariable() with long file names
Pidgin
trac at pidgin.im
Wed Jul 29 23:33:59 EDT 2009
#9801: Crash in zephyr protocol file in function ZGetVariable() with long file
names
------------------------------------+---------------------------------------
Reporter: msb333 | Owner: seanegan
Type: defect | Status: closed
Milestone: 2.6.0 | Component: Zephyr
Version: 2.5.8 | Resolution: fixed
Keywords: crash, buffer-overflow |
------------------------------------+---------------------------------------
Changes (by qulogic at pidgin.im):
* status: new => closed
* resolution: => fixed
* milestone: => 2.6.0
Comment:
(In [e3a225bac3670fe4105e163d68c910550a39b7e0]):[[BR]]
Don't use a static buffer to hold a full filename, since it could possibly
overflow depending on where someone's config directory is.
This Zephyr code is as old as I am, but looks like oh-my-God-what's-wrong-
with-that.
Fixes #9801.
--
Ticket URL: <http://developer.pidgin.im/ticket/9801#comment:2>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list