qbit/xenocara
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
dde5cc23a3
xenocara/lib/libXv
History
matthieu 1e4e5956d0 Protocol handling issues in libXv 
The Xv query functions for adaptors and encodings suffer from out of boundary
accesses if a hostile X server sends a maliciously crafted response.

A previous fix already checks the received length against fixed values but
ignores additional length specifications which are stored inside the received
data.

These lengths are accessed in a for-loop. The easiest way to guarantee a
correct processing is by validating all lengths against the remaining size
left before accessing referenced memory.

This makes the previously applied check obsolete, therefore I removed it.

From Tobias Stoeckmann / X.Org security advisory Oct 4, 2016
2016-10-04 15:09:40 +00:00
..
include Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
man Update to libXv 1.0.8 2013-06-01 14:31:20 +00:00
src Protocol handling issues in libXv 2016-10-04 15:09:40 +00:00
aclocal.m4 Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
AUTHORS import from X.Org 7.2RC2 2006-11-25 18:01:46 +00:00
ChangeLog Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
compile Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
config.guess Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
config.h.in Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
config.sub Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
configure Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
configure.ac Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
COPYING Update to libXv 1.0.7 2012-03-10 16:59:02 +00:00
depcomp Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
INSTALL Fix a number of merge issues accumulated over the years 2013-08-18 06:20:12 +00:00
install-sh Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
ltmain.sh Update to libXv 1.0.7 2012-03-10 16:59:02 +00:00
Makefile.am Update to libXv 1.0.7 2012-03-10 16:59:02 +00:00
Makefile.bsd-wrapper Bump the major on every single base library. There are a couple 2013-08-13 07:07:07 +00:00
Makefile.in Update to libXv 1.0.10 2013-09-28 17:51:20 +00:00
missing Merge upstream fixes for several X libs vulnerabilities 2013-05-23 22:42:07 +00:00
README update to libXv 1.0.5 2009-10-31 18:54:56 +00:00
xv.pc.in import from X.Org 7.2RC2 2006-11-25 18:01:46 +00:00

README 

libXv - library for the X Video (Xv) extension to the X Window System

All questions regarding this software should be directed at the
Xorg mailing list:

        http://lists.freedesktop.org/mailman/listinfo/xorg

Please submit bug reports to the Xorg bugzilla:

        https://bugs.freedesktop.org/enter_bug.cgi?product=xorg

The master development code repository can be found at:

        git://anongit.freedesktop.org/git/xorg/lib/libXv

        http://cgit.freedesktop.org/xorg/lib/libXv

For patch submission instructions, see:

	http://www.x.org/wiki/Development/Documentation/SubmittingPatches

For more information on the git code manager, see:

        http://wiki.x.org/wiki/GitPage