Bug#698543: qcontrol: Sanitize input from lua scripts

2013-03-16 Thread Ian Campbell
Control: tag -1 +pending On Mon, 2013-01-28 at 13:13 +, Ian Campbell wrote: > This issue isn't exposed on Wheezy (no LCD support) but I'll look into > fixing this in Sid (bit busy right now, but I'll get to it). I got to it in the end! I'm just about to apply the following to the git tree.

Bug#698543: qcontrol: Sanitize input from lua scripts

2013-01-28 Thread Ian Campbell
On Sun, 2013-01-20 at 10:10 +0100, Hanno Hecker wrote: > when passing a lua nil (or anything not a string or a number) value as second > (or higher) arg to piccmd() qcontrol dies. Oops! > This is because piccmd()s lcd-line0 / lcd-line1 commands do a strlen() on a > NULL > value. get_args() calls

Bug#698543: qcontrol: Sanitize input from lua scripts

2013-01-20 Thread Hanno Hecker
Package: qcontrol Version: 0.4.2+svn-r40-3 Severity: normal Tags: patch Hi, when passing a lua nil (or anything not a string or a number) value as second (or higher) arg to piccmd() qcontrol dies. This is because piccmd()s lcd-line0 / lcd-line1 commands do a strlen() on a NULL value. get_args() c