Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-27123

QXcbWindow: Buffer overflow

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • P1: Critical
    • None
    • 5.0.0 RC 1
    • GUI: Window management
    • None
    • 70f3c78218c59d1029ea47d1b4fcc869a747f268

    Description

      There is a potential buffer overflow bug in src/plugins/platforms/xcb/qxcbwindow.cpp.

      The code uses a fixed-length array in stack to construct a buffer that can have varying number of elements. The array has length of 4, but in certain conditions, up to 5 elements can be written, causing stack corruption.

      Attached is a patch for current qtbase HEAD.

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            srutledg Shawn Rutledge
            japeq Janne Kulmala
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes