[wxWidgets/wxWidgets] f5c81b: Fix out-of-bounds table read in wxMBConvUTF7::ToWC...

0 views
Skip to first unread message

Ryan Ogurek

unread,
May 27, 2026, 10:19:00 AMMay 27
to wx-co...@googlegroups.com
Branch: refs/heads/master
Home: https://github.com/wxWidgets/wxWidgets
Commit: f5c81bc5de564eb2b27414179b7902559dc6a115
https://github.com/wxWidgets/wxWidgets/commit/f5c81bc5de564eb2b27414179b7902559dc6a115
Author: dxbjavid <dxbj...@gmail.com>
Date: 2026-05-27 (Wed, 27 May 2026)

Changed paths:
M src/common/strconv.cpp
M tests/mbconv/mbconvtest.cpp

Log Message:
-----------
Fix out-of-bounds table read in wxMBConvUTF7::ToWChar()

In wxMBConvUTF7::ToWChar() the value of the byte after '+' was cast to
"unsigned", which meant that on the platforms with signed bytes values
greater than 0x80 were sign-extended to a ~4GiB index which was (way)
out of bounds for a 256-entry table.

Fix the code by casting to "unsigned char", like the cc lookup just
above already does.

Closes #26517.


Commit: eedc16bc89a8cdc5b186c27ef95ae8ba951d343c
https://github.com/wxWidgets/wxWidgets/commit/eedc16bc89a8cdc5b186c27ef95ae8ba951d343c
Author: ryancog <17038122...@users.noreply.github.com>
Date: 2026-05-27 (Wed, 27 May 2026)

Changed paths:
M include/wx/sizer.h
M interface/wx/sizer.h
M src/common/sizer.cpp
M tests/sizers/boxsizer.cpp

Log Message:
-----------
Add wxSizer::DetachItem()

Unlike the existing Detach(), this function doesn't delete wxSizerItem
itself, allowing to add it back to this or another sizer later.

Closes #26512.


Compare: https://github.com/wxWidgets/wxWidgets/compare/975dc5e53dc3...eedc16bc89a8

To unsubscribe from these emails, change your notification settings at https://github.com/wxWidgets/wxWidgets/settings/notifications
Reply all
Reply to author
Forward
0 new messages