[Xcb] [Bug 29373] libicccm: xcb_get_wm_class_from_reply() causes reads beyond end of buffer

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=29373

--- Comment #4 from Alan Coopersmith <alan.coopersmith at oracle.com> 2010-08-03 07:44:48 PDT ---
BTW, I reported the Java bug (failure to NULL terminate WM_CLASS) to the 
Java team when I hit this during the xwininfo port to xcb:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6961123

(In reply to comment #2)
> As a side-note: I took a look at libx11's XGetClassHint() and it's affected,
> too (It uses strlen()).

It works because it calls XGetWindowProperty to get the string, and Xlib always
appends a trailing NULL to the string it returns from XGetWindowProperty.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.