From tomas.kalibera at gmail.com  Fri Jan 19 22:47:43 2018
From: tomas.kalibera at gmail.com (Tomas Kalibera)
Date: Fri, 19 Jan 2018 22:47:43 +0100
Subject: [Rd] Buffer overflow in cairoBM.c line 402
In-Reply-To: <CAAMjEmdum0AA6HJb-Zo3rKoENjFXUe9PSPhy30+JMJk4C6iLjg@mail.gmail.com>
References: <CAAMjEmdum0AA6HJb-Zo3rKoENjFXUe9PSPhy30+JMJk4C6iLjg@mail.gmail.com>
Message-ID: <8020e9f1-35c0-ccb7-baff-d282a766c388@gmail.com>

Thanks for reporting - there is no need to reproduce this, it is an 
obvious error.
I'll probably fix by throwing an error - like it is done in devX11.c 
when the file names are too long.

Tomas

On 01/19/2018 09:41 PM, Omri Schwarz wrote:
> Hi, all.
>
> Testing a change to that line to
>      strncpy(xd->filename, filename,PATH_MAX);
> right now.
>
> The bug itself I've yet to reproduce in anything that doesn't involve
> my employer's proprietary code, but strcpy is strcpy, after all.
>



[Rd] Buffer overflow in cairoBM.c line 402
Tomas Kalibera