mirror of
https://github.com/irssi/irssi.git
synced 2025-02-02 15:08:01 -05:00
Patches for heap corruption and missing bounds check
By Gabriel Campana and Adrien Guinet from Quarkslab.
This commit is contained in:
parent
20b5d4d982
commit
295a4b77f0
@ -131,6 +131,8 @@ void unformat_24bit_color(char **ptr, int off, int *fgcolor, int *bgcolor, int *
|
||||
unsigned char rgbx[4];
|
||||
unsigned int i;
|
||||
for (i = 0; i < 4; ++i) {
|
||||
if ((*ptr)[i + off] == '\0')
|
||||
return;
|
||||
rgbx[i] = (*ptr)[i + off];
|
||||
}
|
||||
rgbx[3] -= 0x20;
|
||||
@ -1341,6 +1343,9 @@ void format_send_to_gui(TEXT_DEST_REC *dest, const char *text)
|
||||
bgcolor = *ptr==(char)0xff ? -1 : *ptr-'0';
|
||||
}
|
||||
}
|
||||
if (*ptr == '\0')
|
||||
break;
|
||||
|
||||
ptr++;
|
||||
break;
|
||||
case 6:
|
||||
|
Loading…
Reference in New Issue
Block a user