This is the one that plagued a lot of you who are using WebKit styles, although it turned out not be anything to do with WebKit styles—as far as I can tell, this affected *all* displays. I was able to reproduce it fairly reliably with 40 notifications at once; now, I cannot reproduce it anymore.

The problem was that the position controller was asking itself for a list of already-reserved rectangles, but when it answered, it claimed that the answer was one rectangle longer than it was. As a result, it would compare prospective rectangles against one more reserved rectangle than it had actually received, and that last rectangle was garbage.

Note that this was *not* a buffer overflow. The buffer into which it copies the rectangles is always big enough to hold the entire list; the problem was that it wasn't filling out the entire buffer (it'd skip one rectangle), but then it would claim that it had used the entire buffer (by not subtracting 1 from the number of returned rectangles).

So that's another thing for you to look forward to in 1.2.1. ☺

--
You received this message because you are subscribed to the Google Groups "Growl 
Discuss" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/growldiscuss?hl=en.

Reply via email to