More heap corruption in xine-ui CVS

Chris Rankin <[email protected]>
Newsgroups gmane.comp.video.xine.user,gmane.comp.video.xine.devel
Message-ID <[email protected]>
Hi,

The heap problems in the kbindings seem to result from the kbt->entry[] array being overfilled.
According to its structure declaration, this array has only 255 entries. However, the
_kbindings_add_entry() function never checks this limit and will quite happily write beyond it.

Cheers,
Chris



      __________________________________________________________
Sent from Yahoo! Mail - a smarter inbox http://uk.mail.yahoo.com


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.