[PATCH] os: fix pnprintf OOB buffer read for unterminated length modifiers

Peter Hutterer peter.hutterer at who-t.net
Wed Feb 13 22:24:31 PST 2013


On Wed, Feb 13, 2013 at 09:59:29PM -0800, Keith Packard wrote:
> Peter Hutterer <peter.hutterer at who-t.net> writes:
> 
> > Format strings with length modifiers but missing format specifier like "%0"
> > will one past the array size.
> 
> 'will read one byte' I assume :-)

> 
> > Signed-off-by: Peter Hutterer <peter.hutterer at who-t.net>
> 
> Reviewed-by: Keith Packard <keithp at keithp.com>
 
whoops, yes. Please push this directly though, my tree is currently too
messed up.

Cheers,
   Peter





More information about the xorg-devel mailing list