xserver/hw
Adam Jackson 8ffaef2ebd vbe: Fix malloc size bug
v2: Slightly more obvious sizing math.

==14882== Invalid write of size 2
==14882==    at 0x6750267: VBEGetVBEInfo (vbe.c:400)
==14882==    by 0x6142064: ??? (in /usr/lib64/xorg/modules/drivers/vesa_drv.so)
==14882==    by 0x471895: InitOutput (xf86Init.c:519)
==14882==    by 0x422778: main (main.c:205)
==14882==  Address 0x4f32fa8 is 72 bytes inside a block of size 73 alloc'd
==14882==    at 0x4A0640D: malloc (vg_replace_malloc.c:236)
==14882==    by 0x675024B: VBEGetVBEInfo (vbe.c:398)
==14882==    by 0x6142064: ??? (in /usr/lib64/xorg/modules/drivers/vesa_drv.so)
==14882==    by 0x471895: InitOutput (xf86Init.c:519)
==14882==    by 0x422778: main (main.c:205)

Reviewed-by: Mark Kettenis <kettenis@openbsd.org>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Adam Jackson <ajax@redhat.com>
(cherry picked from commit d8caa78200)
2011-03-09 15:56:48 -08:00
..
dmx Fix screen number checks. 2010-12-02 12:17:01 -08:00
kdrive Fix screen number checks. 2010-12-02 12:17:01 -08:00
vfb Remove unnecessary parentheses around return values in functions 2010-06-10 06:42:42 -07:00
xfree86 vbe: Fix malloc size bug 2011-03-09 15:56:48 -08:00
xnest dix: purge leftover manual key down bit setting. 2010-07-07 13:29:46 +10:00
xquartz XQuartz: pbproxy: Protect against possible collision between Cocoa and X11 Cursor types 2011-03-03 18:16:08 -08:00
xwin Cygwin/X: Fix glxWinCreateDrawable() for API change 2010-08-10 09:29:39 -07:00
Makefile.am Catch errors in recursive relink targets 2010-03-22 00:45:57 -05:00