kimcinoo
/
efl
forked from enlightenment/efl
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

edje_entry: fix out-ouf-bounds issue in _edje_entry_imf_event_preedit_changed_cb 

The maximum index of tagname is 7, and preedit_type_size is equal to 8.
Checking "attr->preedit_type <= preedit_type_size" implies that the value of "attr->preedit_type" may be up to 8

This patch fixes CID 1039308
This commit is contained in:
Jihoon Kim 2013-11-27 09:31:26 +09:00
parent 2ebd985b31
commit 3d2b7f2ec1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/lib/edje/edje_entry.c
View File

@ -3999,7 +3999,7 @@ _edje_entry_imf_event_preedit_changed_cb(void *data, Ecore_IMF_Context *ctx EINA
{
EINA_LIST_FOREACH(attrs, l, attr)
{
if (attr->preedit_type <= preedit_type_size &&
if (attr->preedit_type < preedit_type_size &&
tagname[attr->preedit_type])
{
preedit_attr_str = eina_strbuf_new();