https://bugs.winehq.org/show_bug.cgi?id=48710
Bug ID: 48710 Summary: wineserver32 crashed when it reads inotify_event with wd == - 1 Product: Wine Version: 5.1 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: critical Priority: P2 Component: wineserver Assignee: wine-bugs@winehq.org Reporter: mmcx@mail.ru Distribution: ---
Created attachment 66582 --> https://bugs.winehq.org/attachment.cgi?id=66582 backtrace.txt
wineserver32 crashed when it reads inotify_event with wd == - 1
The code in change.c contains going beyond the boundaries of the wd_hash array when wd < 0
static struct list wd_hash[ HASH_SIZE ]; static struct inode *inode_from_wd( int wd ) { struct list *bucket = &wd_hash[ wd % HASH_SIZE ]; ...
wine --version wine-5.1 (Debian 5.1-2)
uname -a Linux mmcx 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2+deb10u2 (2019-11-11) x86_64 GNU/Linux