#776 - nx-X11: Size of pointer 'server_support' used instead of size of its data

X2Go Bug report logs - #776
nx-X11: Size of pointer 'server_support' used instead of size of its data

Reported by: Heinrich Schuchardt <xypron.glpk@gmx.de>

Date: Fri, 30 Jan 2015 19:35:02 UTC

Severity: normal

Tags: not-a-bug, pending

Found in version head

Fixed in version 2:3.5.0.29

Done: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Bug is archived. No further changes may be made.

Received: (at submit) by bugs.x2go.org; 30 Jan 2015 19:34:58 +0000
From xypron.glpk@gmx.de  Fri Jan 30 20:34:57 2015
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM
	autolearn=ham version=3.3.2
X-Greylist: delayed 301 seconds by postgrey-1.34 at ymir.das-netzwerkteam.de; Fri, 30 Jan 2015 20:34:57 CET
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 495563BC8A
	for <submit@bugs.x2go.org>; Fri, 30 Jan 2015 20:34:57 +0100 (CET)
Received: from [192.168.123.39] ([178.201.93.16]) by mail.gmx.com (mrgmx102)
 with ESMTPSA (Nemesis) id 0MCOdh-1YPppt1VNR-009Cbb for
 <submit@bugs.x2go.org>; Fri, 30 Jan 2015 20:29:56 +0100
Message-ID: <54CBDBAF.7010309@gmx.de>
Date: Fri, 30 Jan 2015 20:29:51 +0100
From: Heinrich Schuchardt <xypron.glpk@gmx.de>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.3.0
MIME-Version: 1.0
To: submit@bugs.x2go.org
Subject: nx-X11: Size of pointer 'server_support' used instead of size of
 its data
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Provags-ID:  V03:K0:yhDRaxxCGblO+pgNWRwKv9uwoFH1UYM8vaNSdYpMMxXzZfSg9YW
 hFfSdMMJmQabIOYHWjxztzpYAIIuh8BBmIoioHImwix0U3NI9VSlfuro5SoEltsM9+rPkvx
 89Oz+Xg/gtyywYNRCT5b2LxAJUPYxPmq2e3U7c+/uWXXueL97ATtcyG9rI0Kk0ltitJGgJL
 3v2rT7h5+FHMx7TTOzZGQ==
X-UI-Out-Filterresults: notjunk:1;

package: nx-libs version: head In nx-libs/nx-X11/extras/Mesa/src/glx/x11/glxextensions.c the length of the zeroed memory is the length of the pointer (4 bytes in case of a 32bit system) not the length of the data the pointer points to (8 byte). static void __glXProcessServerString( const struct extension_info * ext, const char * server_string, unsigned char * server_support ) { unsigned base; unsigned len; (void) memset( server_support, 0, sizeof( server_support ) ); Furthermore the length of the memory area pointed to by server_support is defined in varying ways in the coding: #define __GL_EXT_BYTES ((__NUM_GL_EXTS + 7) / 8) unsigned char server_support[ __GL_EXT_BYTES ]; unsigned char server_support[8]; Currently __NUM_GL_EXTS = 123, so __GL_EXT_BYTES = 8. What is expected to happen if __GL_EXT_BYTES > 8 after defining six more values in the unamed (sic!) enum with the different bits? This questionable code was identified with cppcheck. http://cppcheck.sourceforge.net/ Best regards Heinrich Schuchardt

X2Go Developers <owner@bugs.x2go.org>. Last modified: Sat Nov 23 11:19:43 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

X2Go Bug report logs - #776 nx-X11: Size of pointer 'server_support' used instead of size of its data

X2Go Bug report logs - #776
nx-X11: Size of pointer 'server_support' used instead of size of its data