plymouth/src/plugins
Ferdinand Bachmann dcf23c0adc label-freetype: fix UAF in set_font_for_control() with hidpi (scale_factor 2)
On hidpi screens, label-freetype will trigger a use-after-free in
set_font_for_control() via the call in update_scale_factor_from_pixel_buffer().

That call passes label->font as the font parameter to set_font_for_control().
set_font_for_control() then calls strdup() on its font argument, and
frees label->font. In this case this causes font to point into freed
memory, causing a read use-after-free in the following strstr() and
strrchr() calls.

Fix the issue by only using the freshly strdup()'d new_font variable
after freeing label->font.
2025-12-01 15:05:48 +00:00
..
controls label-freetype: fix UAF in set_font_for_control() with hidpi (scale_factor 2) 2025-12-01 15:05:48 +00:00
renderers drm: Also exclude SimpleDRM framebuffers with resolution 640x480 2025-08-31 11:23:11 +02:00
splash Fix: script: Ensure Window.GetX/Y() returns 0 for correct multi-display centering 2025-12-01 16:22:01 +08:00
meson.build Port build system to Meson 2022-11-14 12:21:55 -05:00