forked from enlightenment/efl
edje_entry: fix out-ouf-bounds issue in _edje_entry_imf_event_preedit_changed_cb
The maximum index of tagname is 7, and preedit_type_size is equal to 8. Checking "attr->preedit_type <= preedit_type_size" implies that the value of "attr->preedit_type" may be up to 8 This patch fixes CID 1039308
This commit is contained in:
parent
2ebd985b31
commit
3d2b7f2ec1
|
@ -3999,7 +3999,7 @@ _edje_entry_imf_event_preedit_changed_cb(void *data, Ecore_IMF_Context *ctx EINA
|
||||||
{
|
{
|
||||||
EINA_LIST_FOREACH(attrs, l, attr)
|
EINA_LIST_FOREACH(attrs, l, attr)
|
||||||
{
|
{
|
||||||
if (attr->preedit_type <= preedit_type_size &&
|
if (attr->preedit_type < preedit_type_size &&
|
||||||
tagname[attr->preedit_type])
|
tagname[attr->preedit_type])
|
||||||
{
|
{
|
||||||
preedit_attr_str = eina_strbuf_new();
|
preedit_attr_str = eina_strbuf_new();
|
||||||
|
|
Loading…
Reference in New Issue