aboutsummaryrefslogtreecommitdiff
path: root/nx-X11/lib/X11/lcUniConv
diff options
context:
space:
mode:
authorAlan Coopersmith <alan.coopersmith@oracle.com>2013-08-10 23:05:13 -0700
committerUlrich Sibiller <uli42@gmx.de>2016-10-19 21:40:28 +0200
commit5d6cda4f6442c524db3c52b272f7ff5f7225bec6 (patch)
treec018df166007f8faf6852f3f023b5eb61e54553c /nx-X11/lib/X11/lcUniConv
parent069c1f4d52243d17fd8c23008e1b4fe1486477f7 (diff)
downloadnx-libs-5d6cda4f6442c524db3c52b272f7ff5f7225bec6.tar.gz
nx-libs-5d6cda4f6442c524db3c52b272f7ff5f7225bec6.tar.bz2
nx-libs-5d6cda4f6442c524db3c52b272f7ff5f7225bec6.zip
xlibi18n: fix argsize argument to _XlcParsePath
The array is defined as having NUM_LOCALEDIR entries, so use that instead of hardcoded 256 value (the other two calls already did this). Reported by parfait: Buffer overflow (CWE 120): In pointer dereference of argv[argc] with index argc Pointer size is 64 elements (of 8 bytes each), index is 255 at line 82 of nx-X11/lib/X11/lcFile.c in function 'parse_line'. called at line 178 in function '_XlcParsePath' with argv = argv. called at line 722 in function '_XlcLocaleLibDirName' with argv = args, argsize = 256. at line 82 of nx-X11/lib/X11/lcFile.c in function 'parse_line'. called at line 178 in function '_XlcParsePath' with argv = argv. called at line 638 in function '_XlcLocaleDirName' with argv = args, argsize = 256. [ This bug was found by the Parfait 1.2.0 bug checking tool. http://labs.oracle.com/pls/apex/f?p=labs:49:::::P49_PROJECT_ID:13 ] Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> Backported-to-NX-by: Ulrich Sibiller <uli42@gmx.de>
Diffstat (limited to 'nx-X11/lib/X11/lcUniConv')
0 files changed, 0 insertions, 0 deletions