From #ardour May 31st 2017

[20:18] <edogawa> chaot4: trying to update my DG rpm package to 0.9.14,i'm using OBS (open build service), it builds the rpm but the extra checks at the end fail, see the build log here: https://build.opensuse.org/package/live_build_log/home:edogawa/drumgizmo/openSUSE_Tumbleweed/i586
[20:18] <LAbot> Title: Live Build Log - openSUSE Build Service (at build.opensuse.org)
[20:19] <edogawa> [   96s] I: Statement might potentially overflow a destination buffer, where a size larger
[20:19] <edogawa> [   96s]     than the actual buffer was specified
[20:19] <edogawa> [   96s] E: drumgizmo destbufferoverflow ../plugin/plugingizmo/pluginlv2.cc:268:8

More on the topic from #drumgizmo:

[20:21] --> edogawa has joined this channel (~Thunderbi@194-166-185-233.adsl.highway.telekom.at).
[21:43] <-- trebmuh has left this server (Ping timeout: 258 seconds).
[21:43] --> trebmuh has joined this channel (~Olivier@ANancy-653-1-513-98.w109-221.abo.wanadoo.fr).
[22:12] <deva> edogawa, Hey
[22:12] <deva> I just checked the potential overflow you linked
[22:14] <deva> We have an assert that check that the buffer is big enough: http://cgit.drumgizmo.org/plugingizmo/tree/pluginlv2.cc#n266
[22:14] <deva> But it appears that the check should also include the sizeof(LV2_Atom_Event) part...
[22:14] <deva> Thanks for reporting :-)
dev/lv2_buffer_overflow.txt ยท Last modified: 2017/05/31 22:16 by deva
Trace: lv2_buffer_overflow
GNU Free Documentation License 1.3
Valid CSS Driven by DokuWiki Recent changes RSS feed Valid XHTML 1.0