coredump in Kern/fon/src/p2_thick.c
Bug #834229 reported by
Jonathan Kamens
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Cuneiform for Linux |
New
|
Undecided
|
Unassigned |
Bug Description
Coredump due to buffer overflow at Kern/fon/
memcpy(bSource, bDest + xbyte, xbyte * yrow);
xbyte=22, yrow=58
Going up one frame to p2_thick.c:309
MoveUpDownBit
xbyte2 here is calculated from xbit, which is 170
But WR_MAX_WIDTH in Kern/fon/
170.
Fix is either to increase WR_MAX_WIDTH or to get rid of >> 3 at
p2_thick.c:193:
static uchar tmpbuf[
I'm not sure which of these is the correct fix.
To post a comment you must log in.