[PD-dev] [ pure-data-Patches-1930733 ] 0.41-4: prevent buffer overrun in m_class.c

[SourceForge.net]

Patches item #1930733, was opened at 2008-04-01 01:02
Message generated for change (Settings changed) made by xovo
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=478072&aid=1930733&group_id=55736

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
>Category: puredata-dev
Group: bugfix
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Thomas Grill (xovo)
>Assigned to: Miller Puckette (millerpuckette)
Summary: 0.41-4: prevent buffer overrun in m_class.c

Initial Comment:
the array only has MAXPDARG elements.......


--- m_class.ori.c	2008-04-01 03:00:09.000000000 +0200
+++ m_class.c	2008-04-01 03:00:12.000000000 +0200
@@ -763,7 +763,7 @@
     va_start(ap, fmt);
     while (1)
     {
-        if (nargs > MAXPDARG)
+        if (nargs >= MAXPDARG)
         {
             pd_error(x, "pd_vmess: only %d allowed", MAXPDARG);
             break;



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=478072&aid=1930733&group_id=55736