[evolution-patches] [gtkhtml] fixes crash which can occur after paste and autosave




Index: ChangeLog
===================================================================
RCS file: /cvs/gnome/gtkhtml/src/ChangeLog,v
retrieving revision 1.2043
diff -u -p -r1.2043 ChangeLog
--- ChangeLog	23 Sep 2004 18:43:01 -0000	1.2043
+++ ChangeLog	28 Sep 2004 14:50:08 -0000
@@ -1,3 +1,9 @@
+2004-09-28  Radek Doulik  <rodo ximian com>
+
+	* htmlclueflow.c (save_plain): do not let wi drop under clen. it
+	results into negative len value and outbounded memory
+	reads. (might help with #62597)
+
 2004-09-23  Radek Doulik  <rodo ximian com>
 
 	* gtkhtml.c (expand_relative): do not search for ":" in url, it
Index: htmlclueflow.c
===================================================================
RCS file: /cvs/gnome/gtkhtml/src/htmlclueflow.c,v
retrieving revision 1.308
diff -u -p -r1.308 htmlclueflow.c
--- htmlclueflow.c	8 Jun 2004 20:31:25 -0000	1.308
+++ htmlclueflow.c	28 Sep 2004 14:50:08 -0000
@@ -1890,7 +1890,7 @@ save_plain (HTMLObject *self,
 
 						if (wl > clen && wl < slen && html_text_is_line_break (lattrs [wl])) {
 							wi = MIN (wl, clen + max_len);
-							while (wi > 0 && lattrs [wi - 1].is_white)
+							while (wi > clen && lattrs [wi - 1].is_white)
 								wi --;
 							len = wi - clen;
 							skip = wl - wi;


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]