kdudka added a comment.

  I am fine with kio implementing things differently as long as the basic 
functionality keeps working.  I used to use Krusader to get images out of my 
camera and it simply stopped working for me with no obvious indication of what 
went wrong.  This code tries to implement some advanced error handling, yet it 
is written in a way that it passed a review with a fundamental programming 
mistake in the basic error handling.
  
  The fix proposed in https://phabricator.kde.org/D17816#677448 is incomplete, 
as I understand it.  If we break the loop with `valuelen == -1`, the value will 
be passed as `size_t` to the `size` argument of `fsetxattr()`, which may lead 
to reading `value.constData()` out of bounds.

REVISION DETAIL
  https://phabricator.kde.org/D17816

To: arrowd, dfaure, chinmoyr, bruns, #frameworks, tmarshall, usta, cochise
Cc: kdudka, usta, scheirle, tmarshall, arrowd, cfeck, bruns, phidrho, dhaumann, 
funkybomber, abika, pino, davidedmundson, ngraham, atha.kane, spoorun, 
nicolasfella, kde-frameworks-devel, LeGast00n, cblack, michaelh

Reply via email to