diff options
author | Mihai Moldovan <ionic@ionic.de> | 2017-12-15 12:55:17 +0100 |
---|---|---|
committer | Mihai Moldovan <ionic@ionic.de> | 2017-12-15 12:55:17 +0100 |
commit | 1dad092caf01d733990648e6df64cbf964df5143 (patch) | |
tree | 39de0e643e76754a3e23ca9dd0350b8ba4f76250 /debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch | |
parent | 6d70b9e3c47f27a166f4aacb522c5c1e49092dd9 (diff) | |
parent | 2b9025f797ee322e21077e100c2ee27c2e7fa0e0 (diff) | |
download | nx-libs-1dad092caf01d733990648e6df64cbf964df5143.tar.gz nx-libs-1dad092caf01d733990648e6df64cbf964df5143.tar.bz2 nx-libs-1dad092caf01d733990648e6df64cbf964df5143.zip |
Merge branch '3.6.x'
Diffstat (limited to 'debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch')
-rw-r--r-- | debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch | 40 |
1 files changed, 0 insertions, 40 deletions
diff --git a/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch b/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch deleted file mode 100644 index 488c53ff8..000000000 --- a/debian/patches/1030-randr-unvalidated-lengths-in-RandR-extension-sw.full.patch +++ /dev/null @@ -1,40 +0,0 @@ -From cea44678dd6a9418460ead314fb2106924b081f7 Mon Sep 17 00:00:00 2001 -From: Alan Coopersmith <alan.coopersmith@oracle.com> -Date: Sun, 26 Jan 2014 19:38:09 -0800 -Subject: [PATCH 30/40] randr: unvalidated lengths in RandR extension swapped - procs [CVE-2014-8101] - -v2: backport to nx-libs 3.6.x (Mike DePaulo) - -Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> -Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net> ---- - nx-X11/programs/Xserver/randr/rrsdispatch.c | 3 +++ - 1 file changed, 3 insertions(+) - ---- a/nx-X11/programs/Xserver/randr/rrsdispatch.c -+++ b/nx-X11/programs/Xserver/randr/rrsdispatch.c -@@ -28,6 +28,7 @@ SProcRRQueryVersion (ClientPtr client) - register int n; - REQUEST(xRRQueryVersionReq); - -+ REQUEST_SIZE_MATCH(xRRQueryVersionReq); - swaps(&stuff->length, n); - swapl(&stuff->majorVersion, n); - swapl(&stuff->minorVersion, n); -@@ -40,6 +41,7 @@ SProcRRGetScreenInfo (ClientPtr client) - register int n; - REQUEST(xRRGetScreenInfoReq); - -+ REQUEST_SIZE_MATCH(xRRGetScreenInfoReq); - swaps(&stuff->length, n); - swapl(&stuff->window, n); - return (*ProcRandrVector[stuff->randrReqType]) (client); -@@ -75,6 +77,7 @@ SProcRRSelectInput (ClientPtr client) - register int n; - REQUEST(xRRSelectInputReq); - -+ REQUEST_SIZE_MATCH(xRRSelectInputReq); - swaps(&stuff->length, n); - swapl(&stuff->window, n); - swaps(&stuff->enable, n); |