Package: xvt
Version: 2.1-18

Example:
sh-2.05b$ ./xvt -name `perl -e 'print"A"x300'`
Segmentation fault
sh-2.05b$

Bug:
File name: xsetup.c
Function name:  extract_nonX_args(...)

335          for (j = i = 1; i < argc; i++) {
336                  if (strcmp(argv[i],"-name") == 0) {
337                          if (argv[++i] != NULL) {
338                                  res_name = scopy(argv[i]);

In this way I can decide res_name.

File name: xsetup.c
Function name: init_display(...)

370          char str1[256],str2[256];
.
.
.
394          sprintf(str1,"%s.display",res_name);

Patch:

Use snprintf with a lenght check.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to