Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 9761] Null pointer dereference in Cairo if 50, 000 charact

Date: Sat, 18 Jun 2016 19:40:40 +0000

Comment # 6 on bug 9761 from
(In reply to Siddharth Sharma from comment #5)
> It doesnt seems to be cairo issue.
> 
> following code in simple_dialog.c , causes crash the argument ap is va_list
> (Variable Argument Lists) which is used when a function can accept any
> number of values, the number of arguments are unkown at compile time.
> putting 50,000 "A" s causes the corruption in va_list which lead to crash of
> program while executing the code
> 
> message = g_strdup_vprintf(msg_format, ap);

What platform and version of GLib are you using? g_strdup_vprintf calls
g_vasprintf, which can call _g_gnulib_vasprintf, the system's vasprintf, or
_g_vsprintf, aka vsprintf depending on which way the winds were blowing at
configure time.


You are receiving this mail because:
  • You are watching all bug changes.