Specs say SmsInitialize & SmcOpenConnection return NULL terminated strings in errorStringRet, but were just calling strncpy and not making sure strings were NULL terminated if errorLength wasn't long enough. (Noticed while evaluating Coverity ids 196 & 201.) CVS tag: libSM-1_0_1 http://xorg.freedesktop.org/releases/individual/lib/libSM-1.0.1.tar.gz d5c2ba539a8d4b88bfaa4b5c074c0f4c libSM-1.0.1.tar.gz 6215d01ce1edcc6a8200bd84a2d7b3fba4083198 libSM-1.0.1.tar.gz http://xorg.freedesktop.org/releases/individual/lib/libSM-1.0.1.tar.bz2 f15315b5ed2fde4dc6688ef004a34e8a libSM-1.0.1.tar.bz2 1f03c03bb5fbe731ad3427e1eaa3115a7c3f2a82 libSM-1.0.1.tar.bz2 - ajax -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.freedesktop.org/archives/xorg-announce/attachments/20060426/7c22f2b1/attachment.pgp