calling memcpy on an uninitialized pointer??? who would do such a thing!
authordiscomfitor <discomfitor@7cbeb6ba-43b4-40fd-8cce-4c39aea84d33>
Fri, 21 Oct 2011 04:38:21 +0000 (04:38 +0000)
committerdiscomfitor <discomfitor@7cbeb6ba-43b4-40fd-8cce-4c39aea84d33>
Fri, 21 Oct 2011 04:38:21 +0000 (04:38 +0000)
git-svn-id: svn+ssh://svn.enlightenment.org/var/svn/e/trunk/elementary@64232 7cbeb6ba-43b4-40fd-8cce-4c39aea84d33

src/lib/elm_cnp_helper.c

index 5e9b10b..c0b5d01 100644 (file)
@@ -600,6 +600,7 @@ targets_converter(char *target __UNUSED__, void *data, int size, void **data_ret
      {
         if (data_ret)
           {
+             *data_ret = malloc(size * sizeof(char) + 1);
              memcpy(*data_ret, data, size);
              ((char**)(data_ret))[0][size] = 0;
           }
@@ -811,9 +812,9 @@ notify_handler_uri(Cnp_Selection *sel, Ecore_X_Event_Selection_Notify *notify)
      }
    else
      {
+        stripstr = p = malloc(data->length * sizeof(char) + 1);
         memcpy(stripstr, data->data, data->length);
         stripstr[data->length] = 0;
-        p = stripstr;
      }
 
    if (!p)
@@ -988,6 +989,7 @@ text_converter(char *target __UNUSED__, void *data, int size, void **data_ret, i
      {
         if (data_ret)
           {
+             *data_ret = malloc(size * sizeof(char) + 1);
              memcpy(*data_ret, data, size);
              ((char**)(data_ret))[0][size] = 0;
           }
@@ -1034,6 +1036,7 @@ general_converter(char *target __UNUSED__, void *data, int size, void **data_ret
      {
         if (data_ret)
           {
+             *data_ret = malloc(size * sizeof(char) + 1);
              memcpy(*data_ret, data, size);
              ((char**)(data_ret))[0][size] = 0;
           }