Trusting `libX11` a Little Too Much: A Null-Pointer UB in `deft-winit`’s Language-Input Layer
By Ben Walker
TL;DR `deft-winit` is the windowing / input backend used by the Deft GUI framework — a fork of the widely-used Rust `winit` crate. Its Linux X11 Input Method (IME) code passes a pointer and a length straight from the C library `libX11` into `std::slice::from_raw_parts` without checking either value. Because IME is the subsystem that translates … Continued