https://bugs.kde.org/show_bug.cgi?id=525595
Bug ID: 525595
Summary: Lack of input byte checks
Classification: Frameworks and Libraries
Product: frameworks-baloo
Version First unspecified
Reported In:
Platform: Arch Linux
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
DESCRIPTION
PostingCodec::decode()
holds
resize(arr.size() / sizeof(quint64));
memcpy(vec.data(), arr.constData(), arr.size());
It’s effectively sizing the vector using whole 64-bit elements and then
choosing to copy ALL input bytes. There’s no local check that the input length
is actually divisible by eight.
STEPS TO REPRODUCE
N/A
OBSERVED RESULT
Memory leaks
EXPECTED RESULT
No memory leaks
SOFTWARE/OS VERSIONS
Operating System: Arch Linux
KDE Plasma Version: 6.7.5
KDE Frameworks Version: 6.30.0
Qt Version: 6.11.2
ADDITIONAL INFORMATION
--
You are receiving this mail because:
You are watching all bug changes.
