SDL/src
Ryan C. Gordon 46f44f66f8 Fixed potential buffer overflow in SDL_vsnprintf() (thanks, Taylor!).
Fixes Bugzilla #3441.

"When using internal SDL_vsnprintf(), and source string length is greater
than destination, the final NULL char will be written beyond destination size.

Primary issue that is SDL_strlcpy returns length of source string
(SDL_PrintString()), not how much is written to destination. The destination
ptr is then incremented by this length before the sanity check is done.
Destination string is properly terminated, but an extra NULL char will be
written beyond destination buffer length.

Patch used internally is attached which fixes primary issue with SDL_strlcpy()
in SDL_PrintString() and adjusts sanity checks to increment destination ptr
safely."
2016-10-04 14:25:31 -04:00
..
atomic Updated copyright to 2016 2016-01-02 10:10:34 -08:00
audio Mac: Fixed whitespace around function return type. 2016-09-21 23:06:49 +02:00
core Fixed build on older Raspberry Pi environments 2016-10-01 15:04:13 -07:00
cpuinfo Updated copyright to 2016 2016-01-02 10:10:34 -08:00
dynapi Added SDL_SetWindowResizable(). (thanks, Ethan!) 2016-09-29 22:52:41 -04:00
events Fixed bug 3161 - SDL_WINDOWEVENT_EXPOSED event possible queue overflow 2016-10-01 13:38:30 -07:00
file Updated copyright to 2016 2016-01-02 10:10:34 -08:00
filesystem Fixed compiling if filesystem is disabled (thanks, Elias!). 2016-08-30 21:14:13 +02:00
haptic Fixed build warnings and errors 2016-10-01 14:48:18 -07:00
joystick WinRT: build fix in joystick code 2016-10-01 18:10:50 -04:00
libm Updated copyright to 2016 2016-01-02 10:10:34 -08:00
loadso Enable SDL_LoadObject on iOS 8+ and tvOS. 2016-09-25 15:02:06 -03:00
main Fixed bug 3320 - SDL_windows_main.c defines both console application entry points 2016-10-01 12:31:31 -07:00
power Initial Apple TV / tvOS support. 2016-09-13 22:18:06 -03:00
render Fixed wrong pixel format if reading pixels from OpenGL renderer. 2016-10-02 22:32:35 +02:00
stdlib Fixed potential buffer overflow in SDL_vsnprintf() (thanks, Taylor!). 2016-10-04 14:25:31 -04:00
test We should be using a string constant for the strftime format string 2016-10-01 10:38:15 -07:00
thread Fixed bug 3388 - Fail to build src/thread/windows/SDL_systhread.c on MinGW 4.9.3 2016-10-01 10:08:34 -07:00
timer threads: Move SDL's own thread creation to a new internal API. 2016-04-12 16:45:10 -04:00
video Fixed bug 2157 - Caps Lock key produces key down & key up events while key is still pressed. 2016-10-04 02:11:52 -07:00
SDL.c Initial Apple TV / tvOS support. 2016-09-13 22:18:06 -03:00
SDL_assert.c Updated copyright to 2016 2016-01-02 10:10:34 -08:00
SDL_assert_c.h Updated copyright to 2016 2016-01-02 10:10:34 -08:00
SDL_error.c Only use GCC pragmas when we're building with GCC 2016-10-01 11:22:39 -07:00
SDL_error_c.h Updated copyright to 2016 2016-01-02 10:10:34 -08:00
SDL_hints.c Updated copyright to 2016 2016-01-02 10:10:34 -08:00
SDL_internal.h Updated copyright to 2016 2016-01-02 10:10:34 -08:00
SDL_log.c Fixed bug 3323 - SDL_LogOutput prints message twice on Windows when linked with libc 2016-10-01 12:28:05 -07:00