haiku/src/kits/app
Augustin Cavalier 0cdb323800 app_server & Application Kit: Fix bitmap cursor handling.
Using a memcpy here is supremely dangerous, because we are writing to
an app_server buffer that we chose the length for, but using a size
that came from the client. And, indeed, because the buffer can contain
padding if the BBitmap was allocated with a non-standard BytesPerRow,
we will overflow the buffer and corrupt memory, causing app_server to crash.

So, instead, reorganize parameters a bit, and pass BytesPerRow along
with the other data needed to instantiate the bitmap, and then use
ImportBits.

Fixes an app_server crash I triggered with the experimental libX11
compatibility layer.
2021-12-11 21:44:59 -05:00
..
AppDefs.cpp added shutdown_media_server and start_media_server into libmedia.so, based on an older implementation from svn history, but modified and bugfixed 2006-02-12 18:56:00 +00:00
AppMisc.cpp
AppServerLink.cpp
Application.cpp
Clipboard.cpp
Cursor.cpp app_server & Application Kit: Fix bitmap cursor handling. 2021-12-11 21:44:59 -05:00
DesktopLink.cpp
DirectMessageTarget.cpp
Handler.cpp
InitTerminateLibBe.cpp
Invoker.cpp
Jamfile
Key.cpp
KeyStore.cpp
LaunchRoster.cpp
LinkReceiver.cpp
LinkSender.cpp
Looper.cpp
LooperList.cpp
Message.cpp
MessageAdapter.cpp BMessage: implemented KMessage reply. 2015-05-13 23:06:51 +02:00
MessageFilter.cpp
MessageQueue.cpp App Kit: style changes. 2014-06-11 16:24:02 -04:00
MessageRunner.cpp
MessageUtils.cpp
Messenger.cpp Messenger: style fix. 2019-07-08 18:53:48 +00:00
Notification.cpp
PortLink.cpp
PropertyInfo.cpp
RegistrarDefs.cpp
Roster.cpp
RosterPrivate.cpp
Server.cpp
ServerLink.cpp
ServerMemoryAllocator.cpp
TokenSpace.cpp
TypeConstants.cpp
link_message.h