diff options
| author | Adam Jackson <ajax@redhat.com> | 2014-11-10 12:13:43 -0500 |
|---|---|---|
| committer | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2015-02-14 16:14:32 +0100 |
| commit | 9c558f9ca2c0d4e34fa71dff272ed1c39c22cd9d (patch) | |
| tree | b7cc76e19b7a24a7f4f0b133183c69e9d22655fe /nx-X11/programs/Xserver/dix/ffs.c | |
| parent | 8931066077a04999d973932e04da577bd6906c82 (diff) | |
| download | nx-libs-9c558f9ca2c0d4e34fa71dff272ed1c39c22cd9d.tar.gz nx-libs-9c558f9ca2c0d4e34fa71dff272ed1c39c22cd9d.tar.bz2 nx-libs-9c558f9ca2c0d4e34fa71dff272ed1c39c22cd9d.zip | |
glx: Length checking for RenderLarge requests (v2) [CVE-2014-8098 3/8] (v3)
This is a half-measure until we start passing request length into the
varsize function, but it's better than the nothing we had before.
v2: Verify that there's at least a large render header's worth of
dataBytes (Julien Cristau)
v3: backport to RHEL5
v4: backport to nx-libs 3.6.x (Mike DePaulo)
Reviewed-by: Michal Srb <msrb@suse.com>
Reviewed-by: Andy Ritger <aritger@nvidia.com>
Signed-off-by: Adam Jackson <ajax@redhat.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Fedora X Ninjas <x@fedoraproject.org>
Signed-off-by: Dave Airlie <airlied@redhat.com>
fixup swap
Diffstat (limited to 'nx-X11/programs/Xserver/dix/ffs.c')
0 files changed, 0 insertions, 0 deletions