crank down a sscanf bound from 65536 to the real buffer size of 255 (!)
naddy@ ok
This commit is contained in:
parent
6ac43a4335
commit
8ddcf37f84
@ -1,6 +1,6 @@
|
|||||||
$OpenBSD: patch-Imlib_utils_c,v 1.1 2003/06/20 14:53:12 avsm Exp $
|
$OpenBSD: patch-Imlib_utils_c,v 1.2 2003/09/01 16:53:00 avsm Exp $
|
||||||
--- Imlib/utils.c.orig Fri Mar 22 14:43:04 2002
|
--- Imlib/utils.c.orig 2002-03-22 09:43:04.000000000 -0500
|
||||||
+++ Imlib/utils.c Wed Jun 18 20:59:57 2003
|
+++ Imlib/utils.c 2003-08-28 13:19:43.000000000 -0400
|
||||||
@@ -801,6 +801,7 @@ Imlib_crop_and_clone_image(ImlibData * i
|
@@ -801,6 +801,7 @@ Imlib_crop_and_clone_image(ImlibData * i
|
||||||
unsigned char *ptr1, *ptr2;
|
unsigned char *ptr1, *ptr2;
|
||||||
ImlibImage *im2;
|
ImlibImage *im2;
|
||||||
@ -67,3 +67,12 @@ $OpenBSD: patch-Imlib_utils_c,v 1.1 2003/06/20 14:53:12 avsm Exp $
|
|||||||
im2->filename = malloc(strlen(s) + 1);
|
im2->filename = malloc(strlen(s) + 1);
|
||||||
if (im2->filename)
|
if (im2->filename)
|
||||||
strcpy(im2->filename, s);
|
strcpy(im2->filename, s);
|
||||||
|
@@ -1596,7 +1602,7 @@ Imlib_create_image_from_xpm_data(ImlibDa
|
||||||
|
{
|
||||||
|
if (line[k] != ' ')
|
||||||
|
{
|
||||||
|
- sscanf(&line[k], "%65536s", s);
|
||||||
|
+ sscanf(&line[k], "%255s", s);
|
||||||
|
k += strlen(s);
|
||||||
|
if (!strcmp(s, "c"))
|
||||||
|
iscolor = 1;
|
||||||
|
Loading…
Reference in New Issue
Block a user