Avoid buffer overrun in kpress() and remove limit on shortcut strings.
This commit is contained in:
		
							parent
							
								
									02ae3ce6fd
								
							
						
					
					
						commit
						939e149544
					
				
					 1 changed files with 20 additions and 19 deletions
				
			
		
							
								
								
									
										39
									
								
								st.c
									
										
									
									
									
								
							
							
						
						
									
										39
									
								
								st.c
									
										
									
									
									
								
							| 
						 | 
				
			
			@ -264,7 +264,7 @@ typedef struct {
 | 
			
		|||
typedef struct {
 | 
			
		||||
	KeySym k;
 | 
			
		||||
	uint mask;
 | 
			
		||||
	char s[ESC_BUF_SIZ];
 | 
			
		||||
	char *s;
 | 
			
		||||
	/* three valued logic variables: 0 indifferent, 1 on, -1 off */
 | 
			
		||||
	signed char appkey;    /* application keypad */
 | 
			
		||||
	signed char appcursor; /* application cursor */
 | 
			
		||||
| 
						 | 
				
			
			@ -3585,26 +3585,27 @@ kpress(XEvent *ev) {
 | 
			
		|||
	/* 2. custom keys from config.h */
 | 
			
		||||
	if((customkey = kmap(ksym, e->state))) {
 | 
			
		||||
		len = strlen(customkey);
 | 
			
		||||
		memcpy(buf, customkey, len);
 | 
			
		||||
	/* 3. composed string from input method */
 | 
			
		||||
	} else {
 | 
			
		||||
		if(len == 0)
 | 
			
		||||
			return;
 | 
			
		||||
 | 
			
		||||
		if(len == 1 && e->state & Mod1Mask) {
 | 
			
		||||
			if(IS_SET(MODE_8BIT)) {
 | 
			
		||||
				if(*buf < 0177) {
 | 
			
		||||
					c = *buf | 0x80;
 | 
			
		||||
					len = utf8encode(&c, buf);
 | 
			
		||||
				}
 | 
			
		||||
			} else {
 | 
			
		||||
				buf[1] = buf[0];
 | 
			
		||||
				buf[0] = '\033';
 | 
			
		||||
				len = 2;
 | 
			
		||||
			}
 | 
			
		||||
		}
 | 
			
		||||
		ttywrite(customkey, len);
 | 
			
		||||
		if(IS_SET(MODE_ECHO))
 | 
			
		||||
			techo(customkey, len);
 | 
			
		||||
		return;
 | 
			
		||||
	}
 | 
			
		||||
 | 
			
		||||
	/* 3. composed string from input method */
 | 
			
		||||
	if(len == 0)
 | 
			
		||||
		return;
 | 
			
		||||
	if(len == 1 && e->state & Mod1Mask) {
 | 
			
		||||
		if(IS_SET(MODE_8BIT)) {
 | 
			
		||||
			if(*buf < 0177) {
 | 
			
		||||
				c = *buf | 0x80;
 | 
			
		||||
				len = utf8encode(&c, buf);
 | 
			
		||||
			}
 | 
			
		||||
		} else {
 | 
			
		||||
			buf[1] = buf[0];
 | 
			
		||||
			buf[0] = '\033';
 | 
			
		||||
			len = 2;
 | 
			
		||||
		}
 | 
			
		||||
	}
 | 
			
		||||
	ttywrite(buf, len);
 | 
			
		||||
	if(IS_SET(MODE_ECHO))
 | 
			
		||||
		techo(buf, len);
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue