Opened 4 years ago

Closed 4 years ago

#11715 closed defect (fixed)

Buffer overflow in wxXmlResource::GetXRCID

Reported by: botg Owned by:
Priority: normal Milestone:
Component: XRC Version:
Keywords: Cc:
Blocked By: Blocking:
Patch: yes

Description

A signed integer is used to calculate the hash table index in wxXmlResource::GetXRCID. If the ID string is very long or contains characters with negative value, the index may become negative.

Patches for both 2.8 and trunk have been attached.

Attachments (2)

xmlres-28.patch download (543 bytes) - added by botg 4 years ago.
xmlres-trunk.patch download (527 bytes) - added by botg 4 years ago.

Download all attachments as: .zip

Change History (3)

Changed 4 years ago by botg

Changed 4 years ago by botg

comment:1 Changed 4 years ago by vaclavslavik

  • Resolution set to fixed
  • Status changed from new to closed

Applied, thanks!

Note: See TracTickets for help on using tickets.