|
| From: | Bastiaan Jacques |
| Subject: | Re: [Gnash-dev] youtube cookie bug |
| Date: | Wed, 26 May 2010 20:45:41 +0200 (CEST) |
| User-agent: | Alpine 2.00 (DEB 1167 2008-08-23) |
The returned cookie value from NPN_GetValueForURL is not guaranteed to be NULL-terminated. The "length" parameter (from your patch) should be used to ensure we don't read past the end of the buffer. Bastiaan On Wed, 26 May 2010, Rob Savoye wrote:
I made a newer patch (191 lines now) after fixing these changes to not crash older browsers without the proper support. In this case, Iceweasel
| [Prev in Thread] | Current Thread | [Next in Thread] |