aboutsummaryrefslogtreecommitdiff
path: root/README.md%2525252525252525252525252525252525252525252525252525252525252525252...
diff options
context:
space:
mode:
authorAndy Gozas <andy@gozas.me>2022-08-28 22:01:47 +0000
committerAndy Gozas <andy@gozas.me>2022-08-28 22:01:47 +0000
commit513536a47aa495c8f66c0f59b11756a4b72003e1 (patch)
treec3353c8ac789b7dab2eb463253af05d6be3199c8 /README.md%252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525253d5728d045ebfc20cd01408c47e89354bc491308a3%2525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525253d5728d045ebfc20cd01408c47e89354bc491308a3%25252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525253d3c0a2e8d3082a26f5a35cd0d5438a61170afbbe0%252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525253d3c0a2e8d3082a26f5a35cd0d5438a61170afbbe0&id2%252525252525252525252525252525252525252525252525252525252525252525253d9449c5787f64db38a445c6d8ab7c4b8a47cbe541%252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%2525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%25252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91&id2%25252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525252525252525252525252525252525252525253fid2%25252525252525252525252525252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%25252525252525252525252525253fid%25252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%252525252525252525252525253fid%252525252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%2525252525252525252525253fid%2525252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%25252525252525252525253fid%25252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%252525252525252525253fid%252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%2525252525252525253fid%2525252525252525253d4c57f1f61861c28e1cca9a9ae5aa16b8fbf9da1e%25252525252525253fid%25252525252525253d401b6f73f0ebfa3c834c649820048d2d1d678284%252525252525253fid%252525252525253d401b6f73f0ebfa3c834c649820048d2d1d678284%2525252525253fid%2525252525253d2e9f87e5d801e13ac9e5779b5d4db181d3633808%25252525253fid%25252525253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%252525253fid%252525253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%2525253fid%2525253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%25253fid%25253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf&id2%25253d513536a47aa495c8f66c0f59b11756a4b72003e1%253fid%253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%3fid%3d513536a47aa495c8f66c0f59b11756a4b72003e1?id=513536a47aa495c8f66c0f59b11756a4b72003e1
parentebf6f66fe1b9df9209e1e007622c628520f60f05 (diff)
Fix buffer overflow in input handling
kpress function in x.c previously relied on the wrong understanding of XmbLookupString behavior. When the composed string is longer than the available buffer, the buffer is not initialized and the actual length of the data available to read is returned, not the amount of data written. When that amount is later used to process the contents of this buffer, not only will the random contents of the uninitialized buffer be sent directly to the terminal and whichever application is now running in it, but possibly also whatever is in the memory after that buffer, leading to undefined behavior and possible random command execution.
Diffstat (limited to 'README.md%252525252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525252525253d5728d045ebfc20cd01408c47e89354bc491308a3%2525252525252525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525252525252525253d5728d045ebfc20cd01408c47e89354bc491308a3%25252525252525252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525252525252525253d3c0a2e8d3082a26f5a35cd0d5438a61170afbbe0%252525252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525252525253d3c0a2e8d3082a26f5a35cd0d5438a61170afbbe0&id2%252525252525252525252525252525252525252525252525252525252525252525253d9449c5787f64db38a445c6d8ab7c4b8a47cbe541%252525252525252525252525252525252525252525252525252525252525253fid%252525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%2525252525252525252525252525252525252525252525252525252525253fid%2525252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91%25252525252525252525252525252525252525252525252525252525253fid%25252525252525252525252525252525252525252525252525252525253d1993220bf6d9b2aa3e66b1175d45a7f01fe94b91&id2%25252525252525252525252525252525252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%25252525252525252525252525252525252525252525252525253fid2%25252525252525252525252525252525252525252525252525253d7bdb3c5282f26ad10825e8087139d26a7fb00fb2%25252525252525252525252525253fid%25252525252525252525252525253d8e1985b89836d55f86f1e4986f727e51b5b77480%252525252525252525252525253fid%252525252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%2525252525252525252525253fid%2525252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%25252525252525252525253fid%25252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%252525252525252525253fid%252525252525252525253d36d225d71d448bfe307075580f0d8ef81eeb5a87%2525252525252525253fid%2525252525252525253d4c57f1f61861c28e1cca9a9ae5aa16b8fbf9da1e%25252525252525253fid%25252525252525253d401b6f73f0ebfa3c834c649820048d2d1d678284%252525252525253fid%252525252525253d401b6f73f0ebfa3c834c649820048d2d1d678284%2525252525253fid%2525252525253d2e9f87e5d801e13ac9e5779b5d4db181d3633808%25252525253fid%25252525253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%252525253fid%252525253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%2525253fid%2525253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%25253fid%25253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf&id2%25253d513536a47aa495c8f66c0f59b11756a4b72003e1%253fid%253d159f1666a881cdd4ed27a5506ca171c38fcc3cbf%3fid%3d513536a47aa495c8f66c0f59b11756a4b72003e1?id=513536a47aa495c8f66c0f59b11756a4b72003e1')
0 files changed, 0 insertions, 0 deletions