From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.2 required=5.0 tests=ALL_TRUSTED, DKIM_ADSP_NXDOMAIN autolearn=no autolearn_force=no version=3.4.4 Received: (qmail 20696 invoked from network); 25 Mar 2023 23:30:56 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 25 Mar 2023 23:30:56 -0000 Content-Type: multipart/mixed; boundary="===============6360262923000947404==" MIME-Version: 1.0 Subject: =?utf8?q?=5BPR_PATCH=5D_openbox=3A_fix_use_after_free?= To: ml@inbox.vuxu.org From: oreo639 Reply-to: ml@inbox.vuxu.org Message-ID: Date: Sun, 26 Mar 2023 00:30:56 +0100 List-Id: GitHub notification mails are now in MIME to allow UTF8. --===============6360262923000947404== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlcmUgaXMgYSBuZXcgcHVsbCByZXF1ZXN0IGJ5IG9yZW82MzkgYWdhaW5zdCBtYXN0ZXIgb24g dGhlIHZvaWQtcGFja2FnZXMgcmVwb3NpdG9yeQoKaHR0cHM6Ly9naXRodWIuY29tL29yZW82Mzkv dm9pZC1wYWNrYWdlcyBvcGVuYm94Cmh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQt cGFja2FnZXMvcHVsbC80MzAyMQoKb3BlbmJveDogZml4IHVzZSBhZnRlciBmcmVlCjwhLS0gVW5j b21tZW50IHJlbGV2YW50IHNlY3Rpb25zIGFuZCBkZWxldGUgb3B0aW9ucyB3aGljaCBhcmUgbm90 IGFwcGxpY2FibGUgLS0+DQoNCiMjIyMgVGVzdGluZyB0aGUgY2hhbmdlcw0KLSBJIHRlc3RlZCB0 aGUgY2hhbmdlcyBpbiB0aGlzIFBSOiAqKmJyaWVmbHkqKg0KDQpGaXggY3Jhc2hlcyByZXBvcnRl ZCBvbiBvdGhlciBkaXN0cm9zIHdoZW4gdXNpbmcgbWFsbG9jIGluc3RlYWQgb2YgZ2xpYidzIGN1 c3RvbSBhbGxvY2F0b3IuIFRyeSBhcyBJIG1pZ2h0LCBJIGNhbid0IHJlcHJvZHVjZSB0aGUgY3Jh c2hlcyBvbiBWb2lkLCBidXQgdGhpcyByZXBvcnRlZGx5IGZpeGVzIHRoZSBpc3N1ZSBvbiBvdGhl ciBkaXN0cm9zLg0KDQo8IS0tDQojIyMjIE5ldyBwYWNrYWdlDQotIFRoaXMgbmV3IHBhY2thZ2Ug Y29uZm9ybXMgdG8gdGhlIFtwYWNrYWdlIHJlcXVpcmVtZW50c10oaHR0cHM6Ly9naXRodWIuY29t L3ZvaWQtbGludXgvdm9pZC1wYWNrYWdlcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQjcGFj a2FnZS1yZXF1aXJlbWVudHMpOiAqKllFUyoqfCoqTk8qKg0KLS0+DQoNCjwhLS0gTm90ZTogSWYg dGhlIGJ1aWxkIGlzIGxpa2VseSB0byB0YWtlIG1vcmUgdGhhbiAyIGhvdXJzLCBwbGVhc2UgYWRk IGNpIHNraXAgdGFnIGFzIGRlc2NyaWJlZCBpbg0KaHR0cHM6Ly9naXRodWIuY29tL3ZvaWQtbGlu dXgvdm9pZC1wYWNrYWdlcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQjY29udGludW91cy1p bnRlZ3JhdGlvbg0KYW5kIHRlc3QgYXQgbGVhc3Qgb25lIG5hdGl2ZSBidWlsZCBhbmQsIGlmIHN1 cHBvcnRlZCwgYXQgbGVhc3Qgb25lIGNyb3NzIGJ1aWxkLg0KSWdub3JlIHRoaXMgc2VjdGlvbiBp ZiB0aGlzIFBSIGlzIG5vdCBza2lwcGluZyBDSS4NCi0tPg0KPCEtLQ0KIyMjIyBMb2NhbCBidWls ZCB0ZXN0aW5nDQotIEkgYnVpbHQgdGhpcyBQUiBsb2NhbGx5IGZvciBteSBuYXRpdmUgYXJjaGl0 ZWN0dXJlLCAoQVJDSC1MSUJDKQ0KLSBJIGJ1aWx0IHRoaXMgUFIgbG9jYWxseSBmb3IgdGhlc2Ug YXJjaGl0ZWN0dXJlcyAoaWYgc3VwcG9ydGVkLiBtYXJrIGNyb3NzYnVpbGRzKToNCiAgLSBhYXJj aDY0LW11c2wNCiAgLSBhcm12N2wNCiAgLSBhcm12NmwtbXVzbA0KLS0+DQoKCkEgcGF0Y2ggZmls ZSBmcm9tIGh0dHBzOi8vZ2l0aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQtcGFja2FnZXMvcHVsbC80 MzAyMS5wYXRjaCBpcyBhdHRhY2hlZA== --===============6360262923000947404== Content-Type: text/x-diff MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="github-pr-openbox-43021.patch" RnJvbSAxOGVjMjFjNTg5NDBjZmZkOGFmYjJhOGEzNzFjOGY3NGU1ZTUxNjE5IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBvcmVvNjM5IDxvcmVvNjM5MUBnbWFpbC5jb20+CkRhdGU6IFNh dCwgMjUgTWFyIDIwMjMgMTY6Mjc6MDggLTA3MDAKU3ViamVjdDogW1BBVENIXSBvcGVuYm94OiBm aXggdXNlIGFmdGVyIGZyZWUKCi0tLQogLi4uMjhlNWExMDAyYWY0MWM5NzZjODg2MGY4Mjk5Y2Zj ZDNjZDcyLnBhdGNoIHwgNTAgKysrKysrKysrKysrKysrKysrKwogc3JjcGtncy9vcGVuYm94L3Rl bXBsYXRlICAgICAgICAgICAgICAgICAgICAgIHwgIDIgKy0KIDIgZmlsZXMgY2hhbmdlZCwgNTEg aW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQogY3JlYXRlIG1vZGUgMTAwNjQ0IHNyY3BrZ3Mv b3BlbmJveC9wYXRjaGVzL2Q0MTEyOGU1YTEwMDJhZjQxYzk3NmM4ODYwZjgyOTljZmNkM2NkNzIu cGF0Y2gKCmRpZmYgLS1naXQgYS9zcmNwa2dzL29wZW5ib3gvcGF0Y2hlcy9kNDExMjhlNWExMDAy YWY0MWM5NzZjODg2MGY4Mjk5Y2ZjZDNjZDcyLnBhdGNoIGIvc3JjcGtncy9vcGVuYm94L3BhdGNo ZXMvZDQxMTI4ZTVhMTAwMmFmNDFjOTc2Yzg4NjBmODI5OWNmY2QzY2Q3Mi5wYXRjaApuZXcgZmls ZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAuLjExZTJiOTJiNzVhMwotLS0gL2Rldi9u dWxsCisrKyBiL3NyY3BrZ3Mvb3BlbmJveC9wYXRjaGVzL2Q0MTEyOGU1YTEwMDJhZjQxYzk3NmM4 ODYwZjgyOTljZmNkM2NkNzIucGF0Y2gKQEAgLTAsMCArMSw1MCBAQAorRnJvbSBkNDExMjhlNWEx MDAyYWY0MWM5NzZjODg2MGY4Mjk5Y2ZjZDNjZDcyIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQor RnJvbTogcGxkdWJvdWlsaCA8cGxkdWJvdWlsaEBnbWFpbC5jb20+CitEYXRlOiBGcmksIDE3IE1h ciAyMDIzIDE4OjIzOjQ3ICswMTAwCitTdWJqZWN0OiBbUEFUQ0hdIEZpeCBsaXN0IHRyYXZlcnNh bCBpc3N1ZSBpbiBjbGllbnRfY2FsY19sYXllcgorCitUaGUgY2FsbHMgdG8gY2xpZW50X2NhbGNf bGF5ZXJfaW50ZXJuYWwgY2FuIG1vZGlmeSBzdGFja2luZ19saXN0LCB3aGljaAorY2FuIGNhdXNl IHVzIHRvIGZvbGxvdyBkYW5nbGluZyAtPm5leHQgcG9pbnRlcnMgKGVpdGhlciBieSB0aGUgcG9p bnRlcgoraXRzZWxmIGFscmVhZHkgYmVpbmcgZnJlZWQsIG9yIGl0IHBvaW50aW5nIHRvIGEgZnJl ZWQgYXJlYSkuIEF2b2lkIHRoaXMKK2J5IGNvcHlpbmcgdGhlIGxpc3QgZmlyc3QsIHRoZSBnb2Fs IGlzIHRvIHZpc2l0IGV2ZXJ5IGNsaWVudCBpbiB0aGUgbGlzdAorb25jZSBzbyB0aGlzIHNob3Vs ZCBiZSBmaW5lLgorLS0tCisgb3BlbmJveC9jbGllbnQuYyB8IDkgKysrKysrKy0tCisgMSBmaWxl IGNoYW5nZWQsIDcgaW5zZXJ0aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBh L29wZW5ib3gvY2xpZW50LmMgYi9vcGVuYm94L2NsaWVudC5jCitpbmRleCA3MTY4YjI0MDcuLmI4 MjY0NTg3YyAxMDA2NDQKKy0tLSBhL29wZW5ib3gvY2xpZW50LmMKKysrKyBiL29wZW5ib3gvY2xp ZW50LmMKK0BAIC0yNzQyLDkgKzI3NDIsMTIgQEAgc3RhdGljIHZvaWQgY2xpZW50X2NhbGNfbGF5 ZXJfaW50ZXJuYWwoT2JDbGllbnQgKnNlbGYpCisgdm9pZCBjbGllbnRfY2FsY19sYXllcihPYkNs aWVudCAqc2VsZikKKyB7CisgICAgIEdMaXN0ICppdDsKKysgICAgLyogdGhlIGNsaWVudF9jYWxj X2xheWVyX2ludGVybmFsIGNhbGxzIGJlbG93IG1vZGlmeSBzdGFja2luZ19saXN0LAorKyAgICAg ICBzbyB3ZSBoYXZlIHRvIG1ha2UgYSBjb3B5IHRvIGl0ZXJhdGUgb3ZlciAqLworKyAgICBHTGlz dCAqbGlzdCA9IGdfbGlzdF9jb3B5KHN0YWNraW5nX2xpc3QpOworIAorICAgICAvKiBza2lwIG92 ZXIgc3R1ZmYgYWJvdmUgZnVsbHNjcmVlbiBsYXllciAqLworLSAgICBmb3IgKGl0ID0gc3RhY2tp bmdfbGlzdDsgaXQ7IGl0ID0gZ19saXN0X25leHQoaXQpKQorKyAgICBmb3IgKGl0ID0gbGlzdDsg aXQ7IGl0ID0gZ19saXN0X25leHQoaXQpKQorICAgICAgICAgaWYgKHdpbmRvd19sYXllcihpdC0+ ZGF0YSkgPD0gT0JfU1RBQ0tJTkdfTEFZRVJfRlVMTFNDUkVFTikgYnJlYWs7CisgCisgICAgIC8q IGZpbmQgdGhlIHdpbmRvd3MgaW4gdGhlIGZ1bGxzY3JlZW4gbGF5ZXIsIGFuZCBtYXJrIHRoZW0g bm90LXZpc2l0ZWQgKi8KK0BAIC0yNzU3LDcgKzI3NjAsNyBAQCB2b2lkIGNsaWVudF9jYWxjX2xh eWVyKE9iQ2xpZW50ICpzZWxmKQorICAgICBjbGllbnRfY2FsY19sYXllcl9pbnRlcm5hbChzZWxm KTsKKyAKKyAgICAgLyogc2tpcCBvdmVyIHN0dWZmIGFib3ZlIGZ1bGxzY3JlZW4gbGF5ZXIgKi8K Ky0gICAgZm9yIChpdCA9IHN0YWNraW5nX2xpc3Q7IGl0OyBpdCA9IGdfbGlzdF9uZXh0KGl0KSkK KysgICAgZm9yIChpdCA9IGxpc3Q7IGl0OyBpdCA9IGdfbGlzdF9uZXh0KGl0KSkKKyAgICAgICAg IGlmICh3aW5kb3dfbGF5ZXIoaXQtPmRhdGEpIDw9IE9CX1NUQUNLSU5HX0xBWUVSX0ZVTExTQ1JF RU4pIGJyZWFrOworIAorICAgICAvKiBub3cgcmVjYWxjIGFueSB3aW5kb3dzIGluIHRoZSBmdWxs c2NyZWVuIGxheWVyIHdoaWNoIGhhdmUgbm90CitAQCAtMjc2OCw2ICsyNzcxLDggQEAgdm9pZCBj bGllbnRfY2FsY19sYXllcihPYkNsaWVudCAqc2VsZikKKyAgICAgICAgICAgICAgICAgICFXSU5E T1dfQVNfQ0xJRU5UKGl0LT5kYXRhKS0+dmlzaXRlZCkKKyAgICAgICAgICAgICBjbGllbnRfY2Fs Y19sYXllcl9pbnRlcm5hbChpdC0+ZGF0YSk7CisgICAgIH0KKysKKysgICAgZ19saXN0X2ZyZWUo aXQpOworIH0KKyAKKyBnYm9vbGVhbiBjbGllbnRfc2hvdWxkX3Nob3coT2JDbGllbnQgKnNlbGYp CmRpZmYgLS1naXQgYS9zcmNwa2dzL29wZW5ib3gvdGVtcGxhdGUgYi9zcmNwa2dzL29wZW5ib3gv dGVtcGxhdGUKaW5kZXggMWMyZGUyZWU1ZmQ2Li4yZDI3MjNiNzNhNzIgMTAwNjQ0Ci0tLSBhL3Ny Y3BrZ3Mvb3BlbmJveC90ZW1wbGF0ZQorKysgYi9zcmNwa2dzL29wZW5ib3gvdGVtcGxhdGUKQEAg LTEsNyArMSw3IEBACiAjIFRlbXBsYXRlIGZpbGUgZm9yICdvcGVuYm94JwogcGtnbmFtZT1vcGVu Ym94CiB2ZXJzaW9uPTMuNi4xCi1yZXZpc2lvbj00CityZXZpc2lvbj01CiBidWlsZF9zdHlsZT1n bnUtY29uZmlndXJlCiBjb25maWd1cmVfYXJncz0iLS1lbmFibGUtc3RhcnR1cC1ub3RpZmljYXRp b24gJCh2b3B0X2VuYWJsZSBzdmcgbGlicnN2ZykiCiBob3N0bWFrZWRlcGVuZHM9ImF1dG9tYWtl IGxpYnRvb2wgcGtnLWNvbmZpZyBnZXR0ZXh0LWRldmVsIgo= --===============6360262923000947404==--