22 Nov
2016
22 Nov
'16
10 p.m.
From a very quick look: _decode_targets in gtkwidget.pre doesn't check
that the sub-array size is 3 before indexing it. And checking that ITEM(cur)[0].u.string->size_shift is 0 is easy to add. Are there any other restrictions on the string (e.g. is \0 allowed)? The new string range functions are handy for that.