BUG in dbus/dbus-message-factory.c

Havoc Pennington hp at redhat.com
Wed Jun 28 11:39:21 PDT 2006



Peter Kümmel wrote:
> There is a bug in dbus/dbus-message-factory.c,
> the array is too small:
> 
> m = DBUS_MAXIMUM_TYPE_RECURSION_DEPTH
> 
> the index at line 660 is:
> 
>   3*m+3+3 + 1 + (3*m+3+3)/3 = 4m+9
> 
> so we must allocate with 4m+10.
> 

Thanks, looks like a good fix.

Havoc


More information about the dbus mailing list