[Mono-bugs] [Bug 78181][Maj] Changed - string termination bug when
loading gifs
bugzilla-daemon at bugzilla.ximian.com
bugzilla-daemon at bugzilla.ximian.com
Sat Apr 29 14:57:43 EDT 2006
Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.
Changed by peter at novonyx.com.
http://bugzilla.ximian.com/show_bug.cgi?id=78181
--- shadow/78181 2006-04-27 01:14:51.000000000 -0400
+++ shadow/78181.tmp.31052 2006-04-29 14:57:42.000000000 -0400
@@ -1,13 +1,13 @@
Bug#: 78181
Product: Mono: Class Libraries
Version: 1.1
OS: GNU/Linux [Other]
OS Details:
-Status: ASSIGNED
-Resolution:
+Status: RESOLVED
+Resolution: FIXED
Severity: Unknown
Priority: Major
Component: libgdiplus
AssignedTo: peter at novonyx.com
ReportedBy: matt at use.net
QAContact: mono-bugs at ximian.com
@@ -58,6 +58,9 @@
data should be explicitly null terminated.
This appears to be happening because the strlen() is happening on data that
hasn't been null terminated. It will read much farther past the end of the
allocated pointer if the next byte after it doesn't happen to be 0. This
will probably produce severe memory corruption in some memory layouts.
+
+------- Additional Comments From peter at novonyx.com 2006-04-29 14:57 -------
+Nice catch. Fixed in svn r60082.
More information about the mono-bugs
mailing list