** Description changed:
Binary package hint: inkscape
sizes array is 5 long, a typo causes us to write off the end. (If no
sizes were loaded from the preferences file).
diff -urNad inkscape-0.45.1~/src/dialogs/iconpreview.cpp
inkscape-0.45.1/src/dialogs/iconpreview.cpp
--- inkscape-0.45.1~/src/dialogs/iconpreview.cpp 2007-12-22
17:14:55.000000000 +0000
+++ inkscape-0.45.1/src/dialogs/iconpreview.cpp 2007-12-22 17:20:30.000000000
+0000
@@ -130,7 +130,7 @@
sizes[1] = 24;
sizes[2] = 32;
sizes[3] = 48;
- sizes[5] = 128;
+ sizes[4] = 128;
}
pixMem = new guchar*[numEntries];
+
+ Impact: A 5 element array is having a 6th element referenced, causing
+ an out of bounds error. This issue may occur if the user has made
+ certain modifications to their preferences.
+
+ Addressed upstream: The above patch has been committed to upstream's
+ development branch.
+
+ Patch proposed: The above 1-line patch addresses the issue
+
+ Regression potential: None. Logic comes into play only when user has
+ customized their preferences file beyond the default.
--
Array out of bounds in Icon preview dialog
https://bugs.launchpad.net/bugs/178139
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs