[PATCH] os: fix pnprintf OOB buffer read for unterminated length modifiers

Keith Packard keithp at keithp.com
Wed Feb 13 21:59:29 PST 2013


Peter Hutterer <peter.hutterer at who-t.net> writes:

> Format strings with length modifiers but missing format specifier like "%0"
> will one past the array size.

'will read one byte' I assume :-)

> Signed-off-by: Peter Hutterer <peter.hutterer at who-t.net>

Reviewed-by: Keith Packard <keithp at keithp.com>

-- 
keith.packard at intel.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 827 bytes
Desc: not available
URL: <http://lists.x.org/archives/xorg-devel/attachments/20130213/bfeac8db/attachment.pgp>


More information about the xorg-devel mailing list