https://bugs.kde.org/show_bug.cgi?id=491130
--- Comment #11 from Matt Whitlock <k...@mattwhitlock.name> --- Actually, there *is* still an out-of-bounds access; it just happens inside IceWriteAuthFileEntry(). You're telling it that auth_data points to an array of auth_data_length==16 characters, yet the actual size of the object allocated by strdup may be less than that. You may be saved only because the minimum size of an object allocated by glibc's heap allocated is 16 bytes. -- You are receiving this mail because: You are watching all bug changes.