• Keith Packard's avatar
    dix: Allow zero-height PutImage requests (fix for X.Org's CVE-2015-3418). · 2db01a9a
    Keith Packard authored
     The length checking code validates PutImage height and byte width by
     making sure that byte-width >= INT32_MAX / height. If height is zero,
     this generates a divide by zero exception. Allow zero height requests
     explicitly, bypassing the INT32_MAX check.
    
     Fix for regression introduced by fix for CVE-2014-8092.
    
     v2: backports to nx-libs 3.6.x (Mike Gabriel)
     v3: port to NXdispatch.c rather than dispatch.c (Mike DePaulo)
    Signed-off-by: 's avatarKeith Packard <keithp@keithp.com>
    2db01a9a
Name
Last commit
Last update
bin Loading commit data...
debian Loading commit data...
doc Loading commit data...
etc Loading commit data...
nx-X11 Loading commit data...
nxcomp Loading commit data...
nxcompext Loading commit data...
nxcompshad Loading commit data...
nxproxy Loading commit data...
COPYING Loading commit data...
ChangeLog Loading commit data...
Makefile Loading commit data...
README.NX-development Loading commit data...
README.keystrokes Loading commit data...
README.md Loading commit data...
VERSION Loading commit data...
VERSION.x2goagent Loading commit data...
nx-libs.spec Loading commit data...
replace.sh Loading commit data...
version.sh Loading commit data...