OpenBSD / xenocara / my6qDiL / MFC: xfixes: unvalidated lengths (CVE-2017-12183)

OpenBSD/xenocara my6qDiL — xserver/xfixes cursor.c region.c

2017-10-14 09:22:49 UTC by matthieu on ⎇

HEAD

🏷

OPENBSD_6_5_BASE
OPENBSD_6_4_BASE
OPENBSD_6_3_BASE

   MFC: xfixes: unvalidated lengths (CVE-2017-12183)

   v2: Use before swap (Jeremy Huddleston Sequoia)
   v3: Fix wrong XFixesCopyRegion checks (Alan Coopersmith)

Version	Delta		File
1.15	+4	-1	xserver/xfixes/cursor.c
1.13	+2	-1	xserver/xfixes/region.c
1.6	+1	-0	xserver/xfixes/saveset.c
1.10	+1	-0	xserver/xfixes/xfixes.c
	+8	-2	4 files

Unified Split Raw