[Xcb] [PATCH] memcpy() with wrong size in xcb/util/icccm

Barton C Massey bart at cs.pdx.edu
Tue Dec 22 10:19:35 PST 2009


Thanks much for the patch!  It looks right to me, but I'll
defer to someone with more experience with this library and
with the ICCCM.

	Bart

In message <1261420798-sup-2163 at midna.zekjur.net> you wrote:
> a user of i3 recently discovered a problem where libxcb wrote into i3’s
> memory, thereby overwriting a pointer with NULL and thus crashing i3.
> 
> The problem seems to be using the wrong length for memcpy in
> xcb_get_wm_size_hints_from_reply(), see this patch.


More information about the Xcb mailing list