[Bug 42789] Qemu 2.9.0-rc3 crashes before displaying anything

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=42789

Bernhard Übelacker <bernhardu at mailbox.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bernhardu at mailbox.org

--- Comment #2 from Bernhard Übelacker <bernhardu at mailbox.org> ---
Created attachment 60063
  --> https://bugs.winehq.org/attachment.cgi?id=60063
Avoid crash in CURSORICON_GetFileEntry by accessing memory beyond mapped file.

Mapped file has just a size of 69120 bytes.
Unfortunately in function CURSORICON_GetFileEntry entry->dwDIBOffset
contains 1638397.

info = (const BITMAPINFOHEADER *)((const char *)dir + entry->dwDIBOffset);

That way the info variable points to memory outside of the mapped file
while qemu manages to have that memory not available.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.