fdo-mirrors/xserver
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/xorg/xserver.git synced 2025-12-20 08:10:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
xserver/record
History
Exact
Tobias Stoeckmann e23000d83f record: Fix OOB access in ProcRecordUnregisterClients 
If a client sends a RecordUnregisterClients request with an nClients
field larger than INT_MAX / 4, an integer overflow leads to an
out of boundary access in RecordSanityCheckClientSpecifiers.

An example line with libXtst would be:
XRecordUnregisterClients(dpy, rc, clients, 0x40000001);

Reviewed-by: Adam Jackson <ajax@redhat.com>
(cherry picked from commit 40c12a76c2)
2017-09-22 18:45:59 +02:00
..
Makefile.am get rid of XFree86LOADER, XFree86Server, XFree86Module, and IN_MODULE 2006-07-18 18:17:38 -04:00
record.c record: Fix OOB access in ProcRecordUnregisterClients 2017-09-22 18:45:59 +02:00
set.c Convert top level extensions to new *allocarray functions 2015-04-21 16:57:08 -07:00
set.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00