[Bug 48710] New: wineserver32 crashed when it reads inotify_event with wd == - 1

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48710

            Bug ID: 48710
           Summary: wineserver32 crashed when it reads inotify_event with
                    wd == - 1
           Product: Wine
           Version: 5.1
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: critical
          Priority: P2
         Component: wineserver
          Assignee: wine-bugs at winehq.org
          Reporter: mmcx at mail.ru
      Distribution: ---

Created attachment 66582
  --> https://bugs.winehq.org/attachment.cgi?id=66582
backtrace.txt

wineserver32 crashed when it reads inotify_event with wd == - 1

The code in change.c contains going beyond the boundaries of the wd_hash array
when wd < 0

static struct list wd_hash[ HASH_SIZE ];
static struct inode *inode_from_wd( int wd )
{
    struct list *bucket = &wd_hash[ wd % HASH_SIZE ];
...


wine --version 
wine-5.1 (Debian 5.1-2)

uname -a
Linux mmcx 4.19.0-6-amd64 #1 SMP Debian 4.19.67-2+deb10u2 (2019-11-11) x86_64
GNU/Linux

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.