matthieu
74d10c412f
MFC: Xi: integer overflow and unvalidated length in
...
(S)ProcXIBarrierReleasePointer
[jcristau: originally this patch fixed the same issue as commit
211e05ac85 "Xi: Test exact size of XIBarrierReleasePointer", with the
addition of these checks]
This addresses CVE-2017-12179
2017-10-14 09:30:50 +00:00
matthieu
792e23cc09
MFC: Xi: Test exact size of XIBarrierReleasePointer
...
Otherwise a client can send any value of num_barriers and cause
reading or swapping of values on heap behind the receive buffer.
2017-10-14 09:29:01 +00:00
matthieu
4f58590a42
Update to xserver 1.16.1.
...
Tested by naddy@, jsg@ & kettenis@
2014-09-27 17:52:59 +00:00
matthieu
3bbfe7b179
Update to xserver 1.15.1.
...
Tested by at least ajacoutot@, dcoppa@ & jasper@
2014-05-02 19:27:46 +00:00
matthieu
adec87cf5d
Update to X server 1.14.1. Tested by many during t2k13. Thanks.
2013-06-07 17:28:45 +00:00
