Compiz

Coverity SECURE_CODING - CID 12512

Bug #1101571 reported by Product Strategy Coverity Bug Uploader on 2013-01-18

This bug affects 1 person

	Status	Importance	Assigned to
Compiz	Fix Released	Medium	MC Return
0.9.9	Fix Released	Medium	MC Return
compiz (Ubuntu)	Fix Released	Undecided	Unassigned

Bug Description

This bug is exported from the Coverity Integration Manager on Canonical's servers. For information on how this is done please see this website: https://wiki.ubuntu.com/CanonicalProductStrategy/Coverity
CID: 12512
Checker: SECURE_CODING
Category: No category available
CWE definition: http://cwe.mitre.org/data/definitions/676.html
File: /tmp/buildd/compiz-0.9.9~daily13.01.14/plugins/dbus/src/dbus.cpp
Function: DbusScreen::sendChangeSignalForOption(CompOption *, const std::basic_string<char, std::char_traits<char>, std::allocator<char>>&)
Code snippet:
1649
1650 if (!o)
1651 return;
1652
CID 12512 - SECURE_CODING
[VERY RISKY]. Using "sprintf" can cause a buffer overflow when done incorrectly. Because sprintf() assumes an arbitrarily long string, callers must be careful not to overflow the actual space of the destination. Use snprintf() instead, or correct precision specifiers.
1653 sprintf (path, "%s/%s/%s/%s", COMPIZ_DBUS_ROOT_PATH,
1654 plugin.c_str (), "options", o->name ().c_str ());
1655
1656 signal = dbus_message_new_signal (path,
1657 COMPIZ_DBUS_SERVICE_NAME,
1658 COMPIZ_DBUS_CHANGED_SIGNAL_NAME);

Tags:

Related branches

lp:~mc-return/compiz/compiz.merge-fix1101641-use-snprintf-instead-of-sprintf

Merged into lp:compiz/0.9.9 at revision 3588

Sam Spilsbury: Approve on 2013-01-29

PS Jenkins bot: Pending (continuous-integration) requested 2013-01-30

lp:ubuntu/raring/compiz

Revision history for this message

Product Strategy Coverity Bug Uploader (coverity-uploader) wrote on 2013-01-18: compiz-0.9.9: /tmp/buildd/compiz-0.9.9~daily13.01.14/plugins/dbus/src/dbus.cpp

compiz-0.9.9: /tmp/buildd/compiz-0.9.9~daily13.01.14/plugins/dbus/src/dbus.cpp Edit (273.5 KiB, text/html)

Source file with Coverity annotations.

Changed in compiz:
importance:	Undecided → Medium

PS Jenkins bot (ps-jenkins) on 2013-01-30

Changed in compiz:
status:	In Progress → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-02-04:

This bug was fixed in the package compiz - 1:0.9.9~daily13.02.04-0ubuntu1

---------------
compiz (1:0.9.9~daily13.02.04-0ubuntu1) raring; urgency=low

  [ Marco Trevisan (Treviño) ]
  * Spread - Window glow is incorrectly painted in the screen when
    switching spreaded application (LP: #1109805)

  [ MC Return ]
  * Coverity MISSING_BREAK - CID 12463 (LP: #1101561)
  * Thumbnail plugin: Window title text is rendered into transparency
    and glow/background are too large (LP: #1099100)
  * Showmouse plugin code: Needs cleanup (LP: #1105969)
  * Coverity SECURE_CODING - CID 10019 (LP: #957582)
  * Coverity SECURE_CODING - CID 12511 (LP: #1101605)
  * Coverity SECURE_CODING - CID 12512 (LP: #1101571)
  * Keyboard shortcut overlay says Ctrl+Super+Down "minimises" the
    current window, but it doesn't (LP: #966099)
  * Coverity SECURE_CODING - CID 10020 (LP: #957587)
  * Coverity SECURE_CODING - CID 12529 (LP: #1101641)
  * Coverity MISSING_BREAK - CID 12464 (LP: #1101549)
  * Coverity SECURE_CODING - CID 12519 (LP: #1101565)
  * Coverity SECURE_CODING - CID 12516 (LP: #1101499)
  * [GLES] Showmouse plugin needs port to OpenGL|ES (LP: #1106270)