summaryrefslogtreecommitdiff
path: root/menu.c
diff options
context:
space:
mode:
authorChris Down <chris@chrisdown.name>2026-01-14 14:58:05 +0800
committerHiltjo Posthuma <hiltjo@codemadness.org>2026-01-16 14:13:51 +0100
commita9aa0d8ffbb548b0b1f9f755557aef2482c0f820 (patch)
tree1b104e0725530dfb437f732a53a49e01a2c0a913 /menu.c
parent85fe518c1af5eb43f222f4d8579e4814ed769f3b (diff)
dwm: Fix getatomprop regression from heap overflow fixHEADmaster
Commit 244fa852fe27 ("dwm: Fix heap buffer overflow in getatomprop") introduced a check for dl > 0 before dereferencing the property pointer. However, I missed that the variable dl is passed to XGetWindowProperty for both nitems_return and bytes_after_return parameters: XGetWindowProperty(..., &dl, &dl, &p) The final value in dl is bytes_after_return, not nitems_return. For a successfully read property, bytes_after is typically 0 (indicating all data was retrieved), so the check `dl > 0` is always false and dwm never reads any atom properties. So this is safe, but not very helpful :-) dl is probably just a dummy variable anyway, so fix by using a separate variable for nitems, and check nitems > 0 as originally intended.
Diffstat (limited to 'menu.c')
0 files changed, 0 insertions, 0 deletions