fdo-mirrors/xserver
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/xorg/xserver.git synced 2025-12-26 06:30:06 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix for CVE-2008-0006 - PCF Font parser buffer overflow.

Browse source
This commit is contained in:
Matthieu Herrb 2008-01-17 15:29:06 +01:00
parent 8b14f7b742
commit f09b8007e7
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
dix/dixfonts.c
View file

@ -325,6 +325,13 @@ doOpenFont(ClientPtr client, OFclosurePtr c)
err = BadFontName;
goto bail;
}
/* check values for firstCol, lastCol, firstRow, and lastRow */
if (pfont->info.firstCol > pfont->info.lastCol ||
pfont->info.firstRow > pfont->info.lastRow ||
pfont->info.lastCol - pfont->info.firstCol > 255) {
err = AllocError;
goto bail;
}
if (!pfont->fpe)
pfont->fpe = fpe;
pfont->refcnt++;