Compiz

Coverity SECURE_CODING - CID 12519

Bug #1101565 reported by Product Strategy Coverity Bug Uploader on 2013-01-18

This bug affects 1 person

	Status	Importance	Assigned to
Compiz	Fix Released	Medium	MC Return
0.9.9	Fix Released	Medium	MC Return
compiz (Ubuntu)	Fix Released	Undecided	Unassigned

Bug Description

This bug is exported from the Coverity Integration Manager on Canonical's servers. For information on how this is done please see this website: https://wiki.ubuntu.com/CanonicalProductStrategy/Coverity
CID: 12519
Checker: SECURE_CODING
Category: No category available
CWE definition: http://cwe.mitre.org/data/definitions/676.html
File: /tmp/buildd/compiz-0.9.9~daily13.01.14/plugins/water/src/water.cpp
Function: WaterScreen::waterSetup()
Code snippet:
263 program[SET] = new GLProgram (set_water_vertices_vertex_shader,
264 set_water_vertices_fragment_shader);
265
266 if (target == GL_TEXTURE_2D)
CID 12519 - SECURE_CODING
[VERY RISKY]. Using "sprintf" can cause a buffer overflow when done incorrectly. Because sprintf() assumes an arbitrarily long string, callers must be careful not to overflow the actual space of the destination. Use snprintf() instead, or correct precision specifiers.
267 sprintf (buf, update_water_vertices_fragment_shader.c_str (),
268 "2D", "2D",
269 1.0f / (float) texWidth, 1.0f / (float) texWidth,
270 1.0f / (float) texHeight, 1.0f / (float) texHeight,
271 "2D", "2D", "2D", "2D");
272 else

Tags:

Related branches

lp:~mc-return/compiz/compiz.merge-fix1101641-use-snprintf-instead-of-sprintf

Merged into lp:compiz/0.9.9 at revision 3588

Sam Spilsbury: Approve on 2013-01-29

PS Jenkins bot: Pending (continuous-integration) requested 2013-01-30

lp:ubuntu/raring/compiz

Revision history for this message

Product Strategy Coverity Bug Uploader (coverity-uploader) wrote on 2013-01-18: compiz-0.9.9: /tmp/buildd/compiz-0.9.9~daily13.01.14/plugins/water/src/water.cpp

compiz-0.9.9: /tmp/buildd/compiz-0.9.9~daily13.01.14/plugins/water/src/water.cpp Edit (134.0 KiB, text/html)

Source file with Coverity annotations.

Changed in compiz:
importance:	Undecided → Medium

PS Jenkins bot (ps-jenkins) on 2013-01-30

Changed in compiz:
status:	In Progress → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-02-04:

This bug was fixed in the package compiz - 1:0.9.9~daily13.02.04-0ubuntu1

---------------
compiz (1:0.9.9~daily13.02.04-0ubuntu1) raring; urgency=low

  [ Marco Trevisan (Treviño) ]
  * Spread - Window glow is incorrectly painted in the screen when
    switching spreaded application (LP: #1109805)

  [ MC Return ]
  * Coverity MISSING_BREAK - CID 12463 (LP: #1101561)
  * Thumbnail plugin: Window title text is rendered into transparency
    and glow/background are too large (LP: #1099100)
  * Showmouse plugin code: Needs cleanup (LP: #1105969)
  * Coverity SECURE_CODING - CID 10019 (LP: #957582)
  * Coverity SECURE_CODING - CID 12511 (LP: #1101605)
  * Coverity SECURE_CODING - CID 12512 (LP: #1101571)
  * Keyboard shortcut overlay says Ctrl+Super+Down "minimises" the
    current window, but it doesn't (LP: #966099)
  * Coverity SECURE_CODING - CID 10020 (LP: #957587)
  * Coverity SECURE_CODING - CID 12529 (LP: #1101641)
  * Coverity MISSING_BREAK - CID 12464 (LP: #1101549)
  * Coverity SECURE_CODING - CID 12519 (LP: #1101565)
  * Coverity SECURE_CODING - CID 12516 (LP: #1101499)
  * [GLES] Showmouse plugin needs port to OpenGL|ES (LP: #1106270)