Skip to content

channel-main: Handle not terminated host_data and cert_subject_data fields

Frediano Ziglio requested to merge fziglio/spice-gtk:mr_no_terminated into master

host_data and cert_subject_data fields from SPICE messages could be not NUL terminated so using g_strdup can lead to some read overflow.

This bug was discovered by Uri Lublin.

Signed-off-by: Frediano Ziglio freddy77@gmail.com

Merge request reports

Loading