DO NOT REPLY TO THIS MESSAGE. INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.
[STR New] Link: http://www.fltk.org/str.php?L2370 Version: 1.3-current Fl_Tabs.cxx allocates temporary arrays p[128] and w[128] in the methods ::which() and ::draw() that are then indexed by the children() count of the group. Now, children() is not bounded to 128 entries, so in theory a tab widget with more than 128 tabs could conceivably be created, and result in a buffer overflow. That would be bad. Can we think of ways to make the which() and draw() methods of Fl_Tabs make their arrays be sized to match children()? Link: http://www.fltk.org/str.php?L2370 Version: 1.3-current _______________________________________________ fltk-bugs mailing list [email protected] http://lists.easysw.com/mailman/listinfo/fltk-bugs
