Changeset 19220 in vbox for trunk/src/VBox/GuestHost/SharedClipboard

Timestamp:

Apr 27, 2009 3:54:13 PM (16 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

46589

Message:

SharedClipboard/x11: fix a potential crash if a zero-length compound text string is read

File:

• trunk/src/VBox/GuestHost/SharedClipboard/x11-clipboard.cpp (modified) (1 diff)

trunk/src/VBox/GuestHost/SharedClipboard/x11-clipboard.cpp

@@ -320 +320 @@
                    cbSrcLen, cb, cbSrcLen, reinterpret_cast<char *>(pValue)));
     *pcbActual = 0;  /* Only set this to the right value on success. */
+    /** @todo quick fix for 2.2, do this properly. */
+    if (cbSrcLen == 0)
+    {
+        XtFree(reinterpret_cast<char *>(pValue));
+        if (cb < 2)
+            return VERR_BUFFER_OVERFLOW;
+        *(PRTUTF16) pv = 0;
+        *pcbActual = 2;
+        return VINF_SUCCESS;
+    }
     /* First convert the compound text to Utf8 */
     property.value = reinterpret_cast<unsigned char *>(pValue);