https://bugs.kde.org/show_bug.cgi?id=491130

--- Comment #11 from Matt Whitlock <k...@mattwhitlock.name> ---
Actually, there *is* still an out-of-bounds access; it just happens inside
IceWriteAuthFileEntry(). You're telling it that auth_data points to an array of
auth_data_length==16 characters, yet the actual size of the object allocated by
strdup may be less than that. You may be saved only because the minimum size of
an object allocated by glibc's heap allocated is 16 bytes.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to