changeset 1170:96cc46b1cf5e trunk

[svn] - fix a possible allocation overflow issue. found while merging to 1.3 stable.
author nenolod
date Thu, 07 Jun 2007 08:28:08 -0700
parents 55703f60fd54
children cbe5598f5de4
files ChangeLog src/evdev-plug/ed_ui.c
diffstat 2 files changed, 9 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Thu Jun 07 06:34:42 2007 -0700
+++ b/ChangeLog	Thu Jun 07 08:28:08 2007 -0700
@@ -1,3 +1,11 @@
+2007-06-07 13:34:42 +0000  Yoshiki Yazawa <yaz@cc.rim.or.jp>
+  revision [2504]
+  - add check for string length before call g_convert(). it may close #962.
+  
+  trunk/src/wma/libffwma/asf.c |    2 ++
+  1 file changed, 2 insertions(+)
+
+
 2007-06-07 07:21:13 +0000  Yoshiki Yazawa <yaz@cc.rim.or.jp>
   revision [2502]
   - ditto. this is necessary too.
--- a/src/evdev-plug/ed_ui.c	Thu Jun 07 06:34:42 2007 -0700
+++ b/src/evdev-plug/ed_ui.c	Thu Jun 07 08:28:08 2007 -0700
@@ -780,7 +780,7 @@
             {
               /* the trigger-dialog window is open; record input and
                store it in a container managed by the trigger-dialog itself */
-              ed_inputevent_t *dinputev = g_malloc(sizeof(ed_inputevent_t*));
+              ed_inputevent_t *dinputev = g_malloc(sizeof(ed_inputevent_t));
               dinputev->type = inputev.type;
               dinputev->code = inputev.code;
               dinputev->value = inputev.value;