qbit/xenocara
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
dd04a74464
xenocara/lib/libXtst
History
matthieu ce0f69616f Out of boundary access and endless loop in libXtst 
A lack of range checks in libXtst allows out of boundary accesses.
The checks have to be done in-place here, because it cannot be done
without in-depth knowledge of the read data.

If XRecordStartOfData, XRecordEndOfData, or XRecordClientDied
without a client sequence have attached data, an endless loop would
occur. The do-while-loop continues until the current index reaches
the end. But in these cases, the current index would not be
incremented, leading to an endless processing.

From Tobias Stoeckmann / X.Org security advisory Oct 4, 2016
2016-10-04 15:08:08 +00:00
..
include/X11/extensions Update to libXtst 1.2.0. No functional change. 2010-10-31 16:25:10 +00:00
man fix for man pages -- per roff(7), .so should be based in the parent man 2014-06-20 00:38:53 +00:00
specs Update to libXtst 1.2.2 2013-05-31 15:41:54 +00:00
src Out of boundary access and endless loop in libXtst 2016-10-04 15:08:08 +00:00
aclocal.m4 Update to libXtst 1.2.2 2013-05-31 15:41:54 +00:00
ChangeLog Update to libXtst 1.2.2 2013-05-31 15:41:54 +00:00
config.guess Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
config.h.in Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
config.sub Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
configure fix merge issues. 2013-05-31 18:38:23 +00:00
configure.ac fix merge issues. 2013-05-31 18:38:23 +00:00
COPYING Update to libXtst 1.2.2 2013-05-31 15:41:54 +00:00
depcomp Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
docbook.am update to libXtst 1.2.1 2012-03-10 16:54:54 +00:00
INSTALL regenerate with OpenBSD autotools 2006-11-27 12:40:38 +00:00
install-sh Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
ltmain.sh update to libXtst 1.2.1 2012-03-10 16:54:54 +00:00
Makefile.am update to libXtst 1.2.1 2012-03-10 16:54:54 +00:00
Makefile.bsd-wrapper Bump the major on every single base library. There are a couple 2013-08-13 07:07:07 +00:00
Makefile.in Update to libXtst 1.2.2 2013-05-31 15:41:54 +00:00
missing Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
README Update to libXtst 1.2.0. No functional change. 2010-10-31 16:25:10 +00:00
xtst.pc.in Update to libXtst 1.2.2 2013-05-31 15:41:54 +00:00

README 

libXtst provides the Xlib-based client API for the XTEST & RECORD extensions.

The XTEST extension is a minimal set of client and server extensions
required to completely test the X11 server with no user intervention.
This extension is not intended to support general journaling and
playback of user actions.

The RECORD extension supports the recording and reporting of all
core X protocol and arbitrary X extension protocol.

All questions regarding this software should be directed at the
Xorg mailing list:

        http://lists.freedesktop.org/mailman/listinfo/xorg

Please submit bug reports to the Xorg bugzilla:

        https://bugs.freedesktop.org/enter_bug.cgi?product=xorg

The master development code repository can be found at:

        git://anongit.freedesktop.org/git/xorg/lib/libXtst

        http://cgit.freedesktop.org/xorg/lib/libXtst

For patch submission instructions, see:

	http://www.x.org/wiki/Development/Documentation/SubmittingPatches

For more information on the git code manager, see:

        http://wiki.x.org/wiki/GitPage