aboutsummaryrefslogtreecommitdiff
path: root/nxcompext
diff options
context:
space:
mode:
authorMike DePaulo <mikedep333@gmail.com>2015-02-08 21:03:33 -0500
committerMike Gabriel <mike.gabriel@das-netzwerkteam.de>2015-02-14 16:14:31 +0100
commit94c6de0649cd295044b1e4ff7265949c9c787519 (patch)
treea9a795efb5f4c84e078fd594c2535e914f5762e5 /nxcompext
parent36f1dae749acb065eaefca56d42d19ef6822a001 (diff)
downloadnx-libs-94c6de0649cd295044b1e4ff7265949c9c787519.tar.gz
nx-libs-94c6de0649cd295044b1e4ff7265949c9c787519.tar.bz2
nx-libs-94c6de0649cd295044b1e4ff7265949c9c787519.zip
CVE-2014-0210: unvalidated length in _fs_recv_conn_setup() from xorg/lib/libXfont commit 891e084b26837162b12f841060086a105edde86d
The connection setup reply from the font server can include a list of alternate servers to contact if this font server stops working. The reply specifies a total size of all the font server names, and then provides a list of names. _fs_recv_conn_setup() allocated the specified total size for copying the names to, but didn't check to make sure it wasn't copying more data to that buffer than the size it had allocated.
Diffstat (limited to 'nxcompext')
0 files changed, 0 insertions, 0 deletions