diff options
Fix buffer overflow in input handling
kpress function in x.c previously relied on the wrong understanding
of XmbLookupString behavior. When the composed string is longer
than the available buffer, the buffer is not initialized and the
actual length of the data available to read is returned, not
the amount of data written. When that amount is later used to
process the contents of this buffer, not only will the random
contents of the uninitialized buffer be sent directly to the
terminal and whichever application is now running in it, but
possibly also whatever is in the memory after that buffer,
leading to undefined behavior and possible random command execution.
Diffstat (limited to '%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d331033f1f6abe259218666e6f6a848f38d884078%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fshowmsg%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d1%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fshowmsg%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d1%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fshowmsg%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d1%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid2%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid2%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid2%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid2%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d4c57f1f61861c28e1cca9a9ae5aa16b8fbf9da1e%2525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525252525252525253d4c57f1f61861c28e1cca9a9ae5aa16b8fbf9da1e&id2%2525252525252525252525252525252525252525252525252525252525252525252525252525252525253d401b6f73f0ebfa3c834c649820048d2d1d678284%252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%2525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%25252525252525252525252525252525252525252525252525252525252525253fid2%25252525252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%252525252525252525252525252525252525252525252525252525252525253fid2%252525252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%2525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%25252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%2525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525253df800184d3d13e5ad31f69787bed724df64ff4481%252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525253df800184d3d13e5ad31f69787bed724df64ff4481&id2%252525252525252525252525252525252525252525253d3bb917313103eb3a8011baae8d7ccb4103e96825%2525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525253df800184d3d13e5ad31f69787bed724df64ff4481%25252525252525252525252525252525252525253fid%25252525252525252525252525252525252525253df800184d3d13e5ad31f69787bed724df64ff4481%25252525252525252525252525252525253fid%25252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%252525252525252525252525252525253fid%252525252525252525252525252525253df800184d3d13e5ad31f69787bed724df64ff4481%2525252525252525252525253fid%2525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%25252525252525252525253fid%25252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%252525252525252525253fid%252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%2525252525252525253fid%2525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525253fid%25252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%252525252525253fid%252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%2525252525253fid%2525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%25252525253fid%25252525253d4c57f1f61861c28e1cca9a9ae5aa16b8fbf9da1e%252525253fid%252525253d401b6f73f0ebfa3c834c649820048d2d1d678284%2525253fid%2525253d401b6f73f0ebfa3c834c649820048d2d1d678284%25253fid%25253d2e9f87e5d801e13ac9e5779b5d4db181d3633808%253fid%253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%3fid%3d159f1666a881cdd4ed27a5506ca171c38fcc3cbf?id=513536a47aa495c8f66c0f59b11756a4b72003e1')
0 files changed, 0 insertions, 0 deletions