Fix an integer overflow in init_om() that could lead to a double free.

Reported by Jayden Rivers.
This commit is contained in:
matthieu 2020-08-25 15:39:58 +00:00
parent 79163eedae
commit c79b35190f

View File

@ -1908,7 +1908,8 @@ init_om(
char **required_list; char **required_list;
XOrientation *orientation; XOrientation *orientation;
char **value, buf[BUFSIZ], *bufptr; char **value, buf[BUFSIZ], *bufptr;
int count = 0, num = 0, length = 0; int count = 0, num = 0;
unsigned int length = 0;
_XlcGetResource(lcd, "XLC_FONTSET", "on_demand_loading", &value, &count); _XlcGetResource(lcd, "XLC_FONTSET", "on_demand_loading", &value, &count);
if (count > 0 && _XlcCompareISOLatin1(*value, "True") == 0) if (count > 0 && _XlcCompareISOLatin1(*value, "True") == 0)