https://bugs.kde.org/show_bug.cgi?id=366035

--- Comment #10 from Frederick Eaton <frede...@ofb.net> ---
Hi Philippe,

Thanks for the suggestions. I'm afraid I don't have time to fix the full bug,
and I think whoever updates syswrap-linux.c will want to have a working version
of the bug to experiment with, so this is a good place for me to pass it off to
the developers.

FWIW I tried to create a minimal test case but it didn't work; valgrind caught
the buffer overflow:

==19707== Invalid write of size 4
==19707==    at 0x510F183: sync_ptr1.isra.7 (pcm_hw.c:134)
==19707==    by 0x51109CB: sync_ptr (pcm_hw.c:146)
==19707==    by 0x51109CB: snd_pcm_hw_readi (pcm_hw.c:837)
==19707==    by 0x40123B: main (minimal.cpp:83)

I'm attaching the archive with minimal test case included.

Good luck,

Frederick

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to