Skip to content

Fix X11 NULL-deref, leaks, and unbounded copies - #615

Open
EzeriumChristinal wants to merge 5 commits into
BambooEngine:masterfrom
EzeriumChristinal:audit/x11-memsafety
Open

EzeriumChristinal wants to merge 5 commits into
BambooEngine:masterfrom
EzeriumChristinal:audit/x11-memsafety

Conversation

@EzeriumChristinal

Copy link
Copy Markdown

Part of a stack with "Stop closing the shared session-bus connection per focus event" — merge in that order.

x11GetFocusWindowClass crashed with no X display (pure Wayland) and leaked its returned string on every FocusIn; the Go wrapper frees it now. Property walks leaked skipped FocusProxy strings and XQueryTree children. Copies into the 100-byte clipboard/watcher buffers are bounded, and NULL names and displays return early.

C changes only; verified with a full cgo + GTK UI build and the Go test suite.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant