Created attachment 154098 [details]
fix malloc and memcpy arguments
The attached patch fixes access-out-of-bound in slim.
The size argument of memcpy() and malloc() is wrong when modifying environment variables.
Patch tested by reporter and works as intended.
The problem was present, but luckily slim still works. With the new patch to support login.conf, the problematic variables are used, and the bug is triggered.
Reported by: Holger Schröder <firstname.lastname@example.org>
A commit references this bug:
Date: Fri Mar 13 14:26:18 UTC 2015
New revision: 381210
x11/slim: fix malloc and memcpy arguments
Submitted by: Henry Hu <email@example.com>
Committed, thanks for your work!