Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9761] Null pointer dereference in Cairo if 50, 000 characters pasted into the

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 6 on bug 9761 from Gerald Combs

(In reply to Siddharth Sharma from comment #5)
> It doesnt seems to be cairo issue.
> 
> following code in simple_dialog.c , causes crash the argument ap is va_list
> (Variable Argument Lists) which is used when a function can accept any
> number of values, the number of arguments are unkown at compile time.
> putting 50,000 "A" s causes the corruption in va_list which lead to crash of
> program while executing the code
> 
> message = g_strdup_vprintf(msg_format, ap);

What platform and version of GLib are you using? g_strdup_vprintf calls
g_vasprintf, which can call _g_gnulib_vasprintf, the system's vasprintf, or
_g_vsprintf, aka vsprintf depending on which way the winds were blowing at
configure time.

---

      You are receiving this mail because:

• You are watching all bug changes.