http://bugs.winehq.org/show_bug.cgi?id=8361
Summary: Buffer overrun in TOOLTIPS_GetDispInfoW()
Product: Wine
Version: 0.9.36.
Platform: All
OS/Version: All
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: wine-comctl32
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: hto(a)mail.cnt.ru
File tooltips.c, line 395: memcpy() tries to read beyond the ttnmdi.lpszText
buffer limit. Use min() instead of max(), calculating len.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
http://bugs.winehq.org/show_bug.cgi?id=5774
------- Additional Comments From furex.furetto+wine(a)gmail.com 2007-11-05 10:33 -------
You're obviously right on UDP not listening, sorry for the misleading comment. I
was not suggesting it's a leak, but if the same pattern is discernible every
time kad breaks, I'd ask myself why that happens, as the two things might be
indirectly related.
However, I'm going to try wireshark and report back any findings.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
http://bugs.winehq.org/show_bug.cgi?id=7940
mikolaj.zalewski(a)gmail.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Component|wine-comctl32 |wine-shell32
Resolution| |FIXED
------- Additional Comments From mikolaj.zalewski(a)gmail.com 2007-11-05 10:30 -------
The patch got into the Wine Git so this should be fixed in Wine releases
starting from 0.9.37. The problem at 16bpp is a different problem and maybe
that's bug #6806. If not then a new bug report should be opened for it.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
http://bugs.winehq.org/show_bug.cgi?id=6806
------- Additional Comments From mikolaj.zalewski(a)gmail.com 2007-11-05 10:27 -------
Are you running X Windows at 16bpp? This could be the problem that GetDIBits
overflows the buffer with the bitfields CSkinWindow::PreBlend (see comment #23
in bug #7940)
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
http://bugs.winehq.org/show_bug.cgi?id=6311
------- Additional Comments From dmitry(a)codeweavers.com 2007-11-05 10:10 -------
If you add simple 'return TRUE;' at the start of gdi32.BitBlt does it help
to eliminate the crash?
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
http://bugs.winehq.org/show_bug.cgi?id=7571
------- Additional Comments From dmitry(a)codeweavers.com 2007-11-05 10:06 -------
> #2: What would I call it? Im thinking of EnumFontFamiliesA() calling a new
> FONT_EnumFontFamilies() in font.c, which would in turn call a new
> WineEngEnumFontFamilies() in freetype... something like that?
Of course it would be better to have a common backend probably using different
callbacks, but if that will complicate things a lot then yes, something like
that.
> #3: Yes. Any ideas on the RUSSIAN_CHARSET issue I mentioned?
Does the current test pass for you? I.e. is that a problem introduced by your
patch or is that an existing one?
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
http://bugs.winehq.org/show_bug.cgi?id=7571
------- Additional Comments From inckie(a)gmail.com 2007-11-05 09:42 -------
#1: Sorry, it must have been something in my Anjuta configuration. Won't happen
again.
#2: What would I call it? Im thinking of EnumFontFamiliesA() calling a new
FONT_EnumFontFamilies() in font.c, which would in turn call a new
WineEngEnumFontFamilies() in freetype... something like that?
#3: Yes. Any ideas on the RUSSIAN_CHARSET issue I mentioned?
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.