https://bugs.kde.org/show_bug.cgi?id=491130

Kai Uwe Broulik <k...@privat.broulik.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
      Latest Commit|https://invent.kde.org/plas |https://invent.kde.org/plas
                   |ma/plasma-workspace/-/commi |ma/plasma-workspace/-/commi
                   |t/8ee3defdf81e9b5ad3edef498 |t/a336dd70bf51cf4d9be8cf1b6
                   |d04fca0f4289e4a             |6b4819b78850838

--- Comment #23 from Kai Uwe Broulik <k...@privat.broulik.de> ---
Git commit a336dd70bf51cf4d9be8cf1b66b4819b78850838 by Kai Uwe Broulik.
Committed on 20/11/2024 at 07:52.
Pushed by broulik into branch 'Plasma/5.27'.

ksmserver: Fix copying of auth data



Despite IceGenerateMagicCookie returning null terminated char*, the data
itself is pure data may contain null bytes. For this reason we must copy
the entire data_length, and not use string functions.

This fixes a bug where 1 in 10 logins would not have working session
management if the generated data happened to contain a null byte.

Thanks to Matt Whitlock k...@mattwhitlock.name


(cherry picked from commit 2c2f7a848006361a1e9d719de05d2ffcc633205c)

c567ada7 ksmserver: Fix copying of auth data

Co-authored-by: David Edmundson <k...@davidedmundson.co.uk>

(cherry picked from commit 8ee3defdf81e9b5ad3edef498d04fca0f4289e4a)

Co-authored-by: David Edmundson <da...@davidedmundson.co.uk>

M  +6    -2    ksmserver/server.cpp

https://invent.kde.org/plasma/plasma-workspace/-/commit/a336dd70bf51cf4d9be8cf1b66b4819b78850838

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to