OpenBSD / xenocara / lxFZIq8 / MFC: Check for end of string in PatternMatch (CVE-2017-13720)

OpenBSD/xenocara lxFZIq8 — lib/libXfont/src/fontfile fontdir.c

2017-10-14 09:02:08 UTC by matthieu on ⎇

HEAD

🏷

OPENBSD_6_3_BASE

   MFC: Check for end of string in PatternMatch (CVE-2017-13720)

   If a pattern contains '?' character, any character in the string is skipped,
   even if it is '\0'. The rest of the matching then reads invalid memory.

Version	Delta		File
1.10	+3	-1	lib/libXfont/src/fontfile/fontdir.c
	+3	-1	1 files

Unified Split Raw