From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Mike Newsgroups: gmane.emacs.bugs,gmane.emacs.pretest.bugs Subject: bug#4763: Buffer overflow in ns_get_color (nsterm.m:1347) Date: Mon, 19 Oct 2009 23:32:06 -0700 Message-ID: <518da0610910192332q1caa533au24523b446bab9619@mail.gmail.com> Reply-To: Mike , 4763@emacsbugs.donarmstrong.com NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 X-Trace: ger.gmane.org 1256098532 20501 80.91.229.12 (21 Oct 2009 04:15:32 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 21 Oct 2009 04:15:32 +0000 (UTC) To: emacs-pretest-bug@gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Wed Oct 21 06:15:22 2009 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1N0SbZ-0008Ot-9b for geb-bug-gnu-emacs@m.gmane.org; Wed, 21 Oct 2009 06:15:21 +0200 Original-Received: from localhost ([127.0.0.1]:52702 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1N0SbY-0002y2-DH for geb-bug-gnu-emacs@m.gmane.org; Wed, 21 Oct 2009 00:15:20 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1N08V8-00031s-G3 for bug-gnu-emacs@gnu.org; Tue, 20 Oct 2009 02:47:22 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1N08V3-00030i-Jz for bug-gnu-emacs@gnu.org; Tue, 20 Oct 2009 02:47:21 -0400 Original-Received: from [199.232.76.173] (port=38126 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1N08V3-00030d-GD for bug-gnu-emacs@gnu.org; Tue, 20 Oct 2009 02:47:17 -0400 Original-Received: from rzlab.ucr.edu ([138.23.92.77]:36143) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1N08V2-0003ss-UO for bug-gnu-emacs@gnu.org; Tue, 20 Oct 2009 02:47:17 -0400 Original-Received: from rzlab.ucr.edu (rzlab.ucr.edu [127.0.0.1]) by rzlab.ucr.edu (8.14.3/8.14.3/Debian-5) with ESMTP id n9K6lClc032712; Mon, 19 Oct 2009 23:47:12 -0700 Original-Received: (from debbugs@localhost) by rzlab.ucr.edu (8.14.3/8.14.3/Submit) id n9K6e6wx031557; Mon, 19 Oct 2009 23:40:06 -0700 Resent-Date: Mon, 19 Oct 2009 23:40:06 -0700 X-Loop: owner@emacsbugs.donarmstrong.com Resent-From: Mike Resent-To: bug-submit-list@donarmstrong.com Resent-CC: Emacs Bugs , owner@emacsbugs.donarmstrong.com 2Resent-Date: Tue, 20 Oct 2009 06:40:05 +0000 Resent-Message-ID: Resent-Sender: owner@emacsbugs.donarmstrong.com X-Emacs-PR-Message: report 4763 X-Emacs-PR-Package: emacs,ns X-Emacs-PR-Keywords: Original-Received: via spool by submit@emacsbugs.donarmstrong.com id=B.125602033130717 (code B ref -1); Tue, 20 Oct 2009 06:40:05 +0000 Original-Received: (at submit) by emacsbugs.donarmstrong.com; 20 Oct 2009 06:32:11 +0000 X-Spam-Bayes: score:0.5 Bayes not run. spammytokens:Tokens not available. hammytokens:Tokens not available. Original-Received: from fencepost.gnu.org (fencepost.gnu.org [140.186.70.10]) by rzlab.ucr.edu (8.14.3/8.14.3/Debian-5) with ESMTP id n9K6WAfd030712 for ; Mon, 19 Oct 2009 23:32:11 -0700 Original-Received: from mail.gnu.org ([199.232.76.166]:55249 helo=mx10.gnu.org) by fencepost.gnu.org with esmtp (Exim 4.67) (envelope-from ) id 1N08GO-0008FY-N5 for emacs-pretest-bug@gnu.org; Tue, 20 Oct 2009 02:32:08 -0400 Original-Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) (envelope-from ) id 1N08GN-0001tY-J3 for emacs-pretest-bug@gnu.org; Tue, 20 Oct 2009 02:32:08 -0400 Original-Received: from mail-yx0-f191.google.com ([209.85.210.191]:41897) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1N08GN-0001tM-6m for emacs-pretest-bug@gnu.org; Tue, 20 Oct 2009 02:32:07 -0400 Original-Received: by yxe29 with SMTP id 29so2059574yxe.14 for ; Mon, 19 Oct 2009 23:32:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=qJhDqhgMHqRpLNZSF0u8iD14h3KVhG9+Jb13W32YyFc=; b=fVEmPvwjolXorrXy8j3tc7kOzcU1aJaaYXVUlBmF5gvB0+l5PzBEOQxWPmD/wdKYJw IRZ3YIs6jNm6SwxM3Qpp9rq++sg1Bkq7aoZoqlovrDQ+u4CqxVjC1CU7uG2gpIQUStiC KuE1fP0sPB+iXR4BztPN6hKEDxL9n78reVxPE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=vr9F2kl2cz8mejPh5FYOlGpidHgc5DoA7WMstteJ+HzC2DOlwIkedfh7Bf3xCkzuPj ia5csQ1ndAukNTHH8JHeAgdAkwanUB9Gd10GRRjw5CsEHt6o2jLXue64nMb7S1H/BwN9 obAAdW5yue8IBIFdWll7CL45qxekVjJmCzwjs= Original-Received: by 10.150.175.7 with SMTP id x7mr9754714ybe.322.1256020326311; Mon, 19 Oct 2009 23:32:06 -0700 (PDT) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 2) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 2) Resent-Date: Tue, 20 Oct 2009 02:47:21 -0400 X-Mailman-Approved-At: Wed, 21 Oct 2009 00:14:09 -0400 X-BeenThere: bug-gnu-emacs@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:32138 gmane.emacs.pretest.bugs:25132 Archived-At: Package: emacs,ns 1347 else if (!strncmp(name, "rgb:", 4)) /* A newer X11 format -- rgb:r/g/b */ 1348 { 1349 strcpy(hex, name + 4); 1350 scaling = (strlen(hex) - 2) / 3; 1351 } strcpy will happily overwrite the bounds of hex.