diff options
| author | Denis Dzyubenko <denis.dzyubenko@nokia.com> | 2010-10-06 08:31:37 (GMT) |
|---|---|---|
| committer | Denis Dzyubenko <denis.dzyubenko@nokia.com> | 2010-10-06 10:12:45 (GMT) |
| commit | 4b81cb847647450f4bad8a0d9a278d43ebdfecc6 (patch) | |
| tree | 7f474bb83885e422f5284da47e4f3237dd7feed5 /src/gui/kernel/qmotifdnd_x11.cpp | |
| parent | 62ee836fafe515c03b0be716585f8c2354e188f7 (diff) | |
| download | Qt-4b81cb847647450f4bad8a0d9a278d43ebdfecc6.zip Qt-4b81cb847647450f4bad8a0d9a278d43ebdfecc6.tar.gz Qt-4b81cb847647450f4bad8a0d9a278d43ebdfecc6.tar.bz2 | |
Fixed a buffer overrun when pasting large data from non-Qt apps
When we receive a COMPOUND_TEXT data and convert it to multi-byte, if
the new length is less than the original buffer, we resize the buffer,
but then we need to make sure we reset the buffer_offset variable,
which is returned as a "size" of the buffer to a caller.
The conversion to COMPOUND_TEXT format was totally wrong, we were using
the wrong length of the input text, so the converted string was
truncated.
Task-number: QTBUG-8644
Reviewed-by: Bradley T. Hughes
Diffstat (limited to 'src/gui/kernel/qmotifdnd_x11.cpp')
| -rw-r--r-- | src/gui/kernel/qmotifdnd_x11.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/gui/kernel/qmotifdnd_x11.cpp b/src/gui/kernel/qmotifdnd_x11.cpp index 0a7b350..3334455 100644 --- a/src/gui/kernel/qmotifdnd_x11.cpp +++ b/src/gui/kernel/qmotifdnd_x11.cpp @@ -766,7 +766,7 @@ QVariant QX11Data::motifdndObtainData(const char *mimeType) if (got) { Atom type; - if (X11->clipboardReadProperty(tw->internalWinId(), Dnd_selection, true, &result, 0, &type, 0, false)) { + if (X11->clipboardReadProperty(tw->internalWinId(), Dnd_selection, true, &result, 0, &type, 0)) { } } |