fdo-mirrors/xserver
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/xorg/xserver.git synced 2025-12-20 05:50:04 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
xserver/dbe
History
Exact
Keith Packard 044764b5c6 dbe: Call to DDX SwapBuffers requires address of int, not unsigned int [CVE-2014-8097 pt. 2] 
When the local types used to walk the DBE request were changed, this
changed the type of the parameter passed to the DDX SwapBuffers API,
but there wasn't a matching change in the API definition.

At this point, with the API frozen, I just stuck a new variable in
with the correct type. Because we've already bounds-checked nStuff to
be smaller than UINT32_MAX / sizeof(DbeSwapInfoRec), we know it will
fit in a signed int without overflow.

Signed-off-by: Keith Packard <keithp@keithp.com
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
(cherry picked from commit b20912c3d4)
Signed-off-by: Julien Cristau <jcristau@debian.org>
2014-12-09 20:54:11 +01:00
..
dbe.c dbe: Call to DDX SwapBuffers requires address of int, not unsigned int [CVE-2014-8097 pt. 2] 2014-12-09 20:54:11 +01:00
dbestruct.h dbe: Fold the window private private into the window private 2013-09-10 13:28:24 -04:00
Makefile.am dbe: Fold the window private private into the window private 2013-09-10 13:28:24 -04:00
midbe.c Replace 'pointer' type with 'void *' 2014-01-12 10:24:11 -08:00
midbe.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00