• Keith Packard's avatar
    dix: Allow zero-height PutImage requests (fix for X.Org's CVE-2015-3418). · 2db01a9a
    Keith Packard authored
     The length checking code validates PutImage height and byte width by
     making sure that byte-width >= INT32_MAX / height. If height is zero,
     this generates a divide by zero exception. Allow zero height requests
     explicitly, bypassing the INT32_MAX check.
    
     Fix for regression introduced by fix for CVE-2014-8092.
    
     v2: backports to nx-libs 3.6.x (Mike Gabriel)
     v3: port to NXdispatch.c rather than dispatch.c (Mike DePaulo)
    Signed-off-by: 's avatarKeith Packard <keithp@keithp.com>
    2db01a9a
Name
Last commit
Last update
..
GL Loading commit data...
XTrap Loading commit data...
Xext Loading commit data...
Xi Loading commit data...
composite Loading commit data...
damageext Loading commit data...
dbe Loading commit data...
dix Loading commit data...
fb Loading commit data...
hw Loading commit data...
include Loading commit data...
mfb Loading commit data...
mi Loading commit data...
miext Loading commit data...
os Loading commit data...
randr Loading commit data...
record Loading commit data...
render Loading commit data...
xfixes Loading commit data...
xkb Loading commit data...
Imakefile Loading commit data...
Xserver.man Loading commit data...