Am Freitag, 10. Juli 2015, 08:27:08 schrieb James C. McPherson:

[...]

> Recommendation #1 - increase the size of value[]
> Recommendation #2 - use snprintf() instead of sprintf()
> Recommendation #3 - don't push that final string through gettext().

I hope that this is fixed now. Thanks for digging through the code.

commit 8b7931a84de7c9628563ddcaefd86aa9eed8b3ab
Author:     Tobias Ellinghaus <m...@houz.org>
AuthorDate: Fri Jul 10 11:46:07 2015 +0200
Commit:     Tobias Ellinghaus <m...@houz.org>
CommitDate: Fri Jul 10 11:46:07 2015 +0200

    Hopefully fix a buffer overflow
    
    It seems that under some circumstances the assembled strings could
    become too long.

> James C. McPherson

Tobias

Attachment: signature.asc
Description: This is a digitally signed message part.

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
darktable-devel mailing list
darktable-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/darktable-devel

Reply via email to