[Bug 20863] New: Write buffer overrun and heap corruption in Widget_DoSomething in oleaut32/tests/tmarshal.c

http://bugs.winehq.org/show_bug.cgi?id=20863

           Summary: Write buffer overrun and heap corruption in
                    Widget_DoSomething in oleaut32/tests/tmarshal.c
           Product: Wine
           Version: 1.1.33
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Keywords: download, source, testcase
          Severity: normal
          Priority: P2
         Component: oleaut32
        AssignedTo: wine-bugs(a)winehq.org
        ReportedBy: dank(a)kegel.com


The third valgrind error in
http://kegel.com/wine/valgrind/logs/2009-11-27-12.53/vg-oleaut32_tmarshal.tx...
is
 Invalid write of size 4
    at  Widget_DoSomething (tmarshal.c:371)
    by  ??? (typelib.c:5632)
    by  _invoke (typelib.c:5688)
    by  DispCallFunc (typelib.c:5948)
    by  test_DispCallFunc (tmarshal.c:1399)
  Address 0x7f85edac is 4 bytes inside a block of size 6 alloc'd
    at  notify_alloc (heap.c:247)
    by  RtlAllocateHeap (heap.c:1697)
    by  SysAllocStringLen (oleaut.c:233)
    by  SysAllocString (oleaut.c:157)
    by  test_DispCallFunc (tmarshal.c:1391)
and is followed by the heap overrun warning 
err:heap:HEAP_ValidateTail Heap 0x7f000000: invalid arena 0x7f85eda0, buffer
0x7f85eda8, corrupt at 0x7f85edae (0 bytes past end of 6 byte buffer)

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.

[Bug 20863] Write buffer overrun and heap corruption in Widget_DoSomething in oleaut32/tests/tmarshal.c

http://bugs.winehq.org/show_bug.cgi?id=20863


Rob Shearman <robertshearman(a)gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




--- Comment #1 from Rob Shearman <robertshearman(a)gmail.com>  2009-12-30 05:13:57 ---
Fixed by a94265e5a990bbffa7dbfc42bc0cd2d2392995b1.

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.

[Bug 20863] Write buffer overrun and heap corruption in Widget_DoSomething in oleaut32/tests/tmarshal.c

http://bugs.winehq.org/show_bug.cgi?id=20863


Jeff Zaroyko <jeffz(a)jeffz.name> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED




--- Comment #2 from Jeff Zaroyko <jeffz(a)jeffz.name>  2010-01-09 04:50:54 ---
Closing bugs fixed in 1.1.36.

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.