Array bounds write: GTK nsListBox

VERIFIED FIXED

Status

()

P3
major
VERIFIED FIXED
20 years ago
20 years ago

People

(Reporter: bruce, Assigned: pollmann)

Tracking

Trunk
Sun
Solaris
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

20 years ago
In nsListBox::GetSelectedIndices() for GTK on line 303 (as of the checkin from
the evening of March 10, 1999):

aIndices[i] - (PRInt32)i;

This shows up readily under Purify when visiting the Demo 4 page (the first one
with forms) in viewer.

Updated

20 years ago
Assignee: karnaze → ramiro

Comment 1

20 years ago
Reassigning to Ramiro, not sure if Pavlov can get bugs.

Comment 2

20 years ago
syd, this was some code you added.  care to take a look?
(Assignee)

Updated

20 years ago
Assignee: ramiro → pollmann
(Assignee)

Comment 3

20 years ago
Sorry, it was actually code I added.
I found the bug and will be checking in a fix later today.
(Assignee)

Comment 4

20 years ago
Chris, I have the fix in hand, can I check this in?
(Assignee)

Updated

20 years ago
Status: ASSIGNED → RESOLVED
Last Resolved: 20 years ago
Resolution: --- → FIXED
(Assignee)

Comment 5

20 years ago
Just checked in the fix.
(Reporter)

Updated

20 years ago
Status: RESOLVED → VERIFIED

Comment 6

20 years ago
Moving all Widget Set bugs, past and present, to new HTML Form Controls
component per request from karnaze.  Widget Set component will be retired
shortly.
You need to log in before you can comment on or make changes to this bug.