diff options
Fix buffer overflow in input handling
kpress function in x.c previously relied on the wrong understanding
of XmbLookupString behavior. When the composed string is longer
than the available buffer, the buffer is not initialized and the
actual length of the data available to read is returned, not
the amount of data written. When that amount is later used to
process the contents of this buffer, not only will the random
contents of the uninitialized buffer be sent directly to the
terminal and whichever application is now running in it, but
possibly also whatever is in the memory after that buffer,
leading to undefined behavior and possible random command execution.
Diffstat (limited to '%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d3ce96aea8af566c88ed1e076d270b4d1abcf6e96&id2%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253ded90afb743911b7b95dc2bf36b65076532779269%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d3ce96aea8af566c88ed1e076d270b4d1abcf6e96%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253ded90afb743911b7b95dc2bf36b65076532779269%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253ded90afb743911b7b95dc2bf36b65076532779269&id2%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253dc9bd58e4dd04e61aa3613eab57ba6fb716a41146%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fshowmsg%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d1%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d3bb917313103eb3a8011baae8d7ccb4103e96825%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d3bb917313103eb3a8011baae8d7ccb4103e96825%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%252525252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%2525252525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%25252525252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%2525252525252525252525252525252525252525252525252525252525252525253fshowmsg%2525252525252525252525252525252525252525252525252525252525252525253d1%252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%2525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525253df800184d3d13e5ad31f69787bed724df64ff4481%25252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525253d3bb917313103eb3a8011baae8d7ccb4103e96825%252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525253d713545c1fc38dda390d0ecb98dadcb8deca5e716%2525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525253d713545c1fc38dda390d0ecb98dadcb8deca5e716&id2%2525252525252525252525252525252525252525252525252525253d3144a61c180b678f6b1c23f06e4b434090199fcb%25252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525253d713545c1fc38dda390d0ecb98dadcb8deca5e716%252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525253d3144a61c180b678f6b1c23f06e4b434090199fcb%2525252525252525252525252525252525252525253fshowmsg%2525252525252525252525252525252525252525253d1%25252525252525252525252525252525253fshowmsg%25252525252525252525252525252525253d1%252525252525252525252525252525253fshowmsg%252525252525252525252525252525253d1%25252525252525252525252525253fid%25252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%252525252525252525252525253fid%252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%2525252525252525252525253fid%2525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%25252525252525252525253fid%25252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%25252525252525253fid%25252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%252525252525253fid%252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%2525252525253fid%2525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%25252525253fid%25252525253d4c57f1f61861c28e1cca9a9ae5aa16b8fbf9da1e%252525253fid%252525253d4c57f1f61861c28e1cca9a9ae5aa16b8fbf9da1e%2525253fid%2525253d401b6f73f0ebfa3c834c649820048d2d1d678284%25253fid%25253d2e9f87e5d801e13ac9e5779b5d4db181d3633808%253fid%253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%3fid%3d513536a47aa495c8f66c0f59b11756a4b72003e1?id=513536a47aa495c8f66c0f59b11756a4b72003e1')
0 files changed, 0 insertions, 0 deletions