Please do not reply to this email- if you want to comment on the bug, go to the URL shown below and enter your comments there.
Changed by [EMAIL PROTECTED] http://bugzilla.ximian.com/show_bug.cgi?id=78181 --- shadow/78181 2006-04-27 01:14:51.000000000 -0400 +++ shadow/78181.tmp.31052 2006-04-29 14:57:42.000000000 -0400 @@ -1,13 +1,13 @@ Bug#: 78181 Product: Mono: Class Libraries Version: 1.1 OS: GNU/Linux [Other] OS Details: -Status: ASSIGNED -Resolution: +Status: RESOLVED +Resolution: FIXED Severity: Unknown Priority: Major Component: libgdiplus AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] QAContact: [EMAIL PROTECTED] @@ -58,6 +58,9 @@ data should be explicitly null terminated. This appears to be happening because the strlen() is happening on data that hasn't been null terminated. It will read much farther past the end of the allocated pointer if the next byte after it doesn't happen to be 0. This will probably produce severe memory corruption in some memory layouts. + +------- Additional Comments From [EMAIL PROTECTED] 2006-04-29 14:57 ------- +Nice catch. Fixed in svn r60082. _______________________________________________ mono-bugs maillist - [email protected] http://lists.ximian.com/mailman/listinfo/mono-bugs
