-
Keith Packard authored
The length checking code validates PutImage height and byte width by making sure that byte-width >= INT32_MAX / height. If height is zero, this generates a divide by zero exception. Allow zero height requests explicitly, bypassing the INT32_MAX check. Fix for regression introduced by fix for CVE-2014-8092. v2: backports to nx-libs 3.6.x (Mike Gabriel) v3: port to NXdispatch.c rather than dispatch.c (Mike DePaulo) Signed-off-by:
Keith Packard <keithp@keithp.com>
2db01a9a
Name |
Last commit
|
Last update |
---|---|---|
bin | ||
debian | ||
doc | ||
etc | ||
nx-X11 | ||
nxcomp | ||
nxcompext | ||
nxcompshad | ||
nxproxy | ||
COPYING | ||
ChangeLog | ||
Makefile | ||
README.NX-development | ||
README.keystrokes | ||
README.md | ||
VERSION | ||
VERSION.x2goagent | ||
nx-libs.spec | ||
replace.sh | ||
version.sh |