<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vcxsrv/libXfont, branch release/external-1.15.2.x</title>
<subtitle>VcXsrv Windows X Server (X2Go/Arctica Builds)
</subtitle>
<id>https://cgit.arctica-project.org/vcxsrv/atom?h=release%2Fexternal-1.15.2.x</id>
<link rel='self' href='https://cgit.arctica-project.org/vcxsrv/atom?h=release%2Fexternal-1.15.2.x'/>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/'/>
<updated>2015-03-28T13:15:34+00:00</updated>
<entry>
<title>libXfont 1.4.9</title>
<updated>2015-03-28T13:15:34+00:00</updated>
<author>
<name>Alan Coopersmith</name>
<email>alan.coopersmith@oracle.com</email>
</author>
<published>2015-03-17T15:46:46+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=453693754f79152011494e734afd024cd1ba482b'/>
<id>urn:sha1:453693754f79152011494e734afd024cd1ba482b</id>
<content type='text'>
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
</content>
</entry>
<entry>
<title>bdfReadCharacters: ensure metrics fit into xCharInfo struct [CVE-2015-1804]</title>
<updated>2015-03-28T13:15:33+00:00</updated>
<author>
<name>Alan Coopersmith</name>
<email>alan.coopersmith@oracle.com</email>
</author>
<published>2015-03-07T06:54:58+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=a54b6ab76fd473a0ea79ffdbf08c22c368bb133c'/>
<id>urn:sha1:a54b6ab76fd473a0ea79ffdbf08c22c368bb133c</id>
<content type='text'>
We use 32-bit ints to read from the bdf file, but then try to stick
into a 16-bit int in the xCharInfo struct, so make sure they won't
overflow that range.

Found by afl-1.24b.

v2: Verify that additions won't overflow 32-bit int range either.
v3: As Julien correctly observes, the previous check for bh &amp; bw not
    being &lt; 0 reduces the number of cases we need to check for overflow.

Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Reviewed-by: Julien Cristau &lt;jcristau@debian.org&gt;
(cherry picked from commit 2351c83a77a478b49cba6beb2ad386835e264744)
</content>
</entry>
<entry>
<title>bdfReadCharacters: bailout if a char's bitmap cannot be read [CVE-2015-1803]</title>
<updated>2015-03-28T13:15:32+00:00</updated>
<author>
<name>Alan Coopersmith</name>
<email>alan.coopersmith@oracle.com</email>
</author>
<published>2015-02-06T23:54:00+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=c833cc9b47becd22b5f6de91d69a467adc57c87d'/>
<id>urn:sha1:c833cc9b47becd22b5f6de91d69a467adc57c87d</id>
<content type='text'>
Previously would charge on ahead with a NULL pointer in ci-&gt;bits, and
then crash later in FontCharInkMetrics() trying to access the bits.

Found with afl-1.23b.

Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Reviewed-by: Julien Cristau &lt;jcristau@debian.org&gt;
(cherry picked from commit 78c2e3d70d29698244f70164428bd2868c0ab34c)
</content>
</entry>
<entry>
<title>bdfReadProperties: property count needs range check [CVE-2015-1802]</title>
<updated>2015-03-28T13:15:32+00:00</updated>
<author>
<name>Alan Coopersmith</name>
<email>alan.coopersmith@oracle.com</email>
</author>
<published>2015-02-06T23:50:45+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=ad956b8d1970952639b87c0b3bae966277fd1a32'/>
<id>urn:sha1:ad956b8d1970952639b87c0b3bae966277fd1a32</id>
<content type='text'>
Avoid integer overflow or underflow when allocating memory arrays
by multiplying the number of properties reported for a BDF font.

Reported-by: Ilja Van Sprundel &lt;ivansprundel@ioactive.com&gt;
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Reviewed-by: Julien Cristau &lt;jcristau@debian.org&gt;
(cherry picked from commit 2deda9906480f9c8ae07b8c2a5510cc7e4c59a8e)
</content>
</entry>
<entry>
<title>Set close-on-exec for font file I/O.</title>
<updated>2015-03-28T13:15:31+00:00</updated>
<author>
<name>Christos Zoulas</name>
<email>christos@NetBSD.org</email>
</author>
<published>2015-02-25T20:39:30+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=6bbd73827f301fbe93b96649b63355c2ee4b0b80'/>
<id>urn:sha1:6bbd73827f301fbe93b96649b63355c2ee4b0b80</id>
<content type='text'>
Reviewed-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Signed-off-by: Thomas Klausner &lt;wiz@NetBSD.org&gt;
(cherry picked from commit d9fda3d247942292a5f24694c22337c547006e11)
</content>
</entry>
<entry>
<title>Updated to libXfont 1.4.8</title>
<updated>2014-06-08T13:03:35+00:00</updated>
<author>
<name>marha</name>
<email>marha@users.sourceforge.net</email>
</author>
<published>2014-06-08T13:03:35+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=d435b20322433b335a4fc5693cce0399a3f27b2d'/>
<id>urn:sha1:d435b20322433b335a4fc5693cce0399a3f27b2d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Update following packages:</title>
<updated>2014-03-28T16:32:23+00:00</updated>
<author>
<name>marha</name>
<email>marha@users.sourceforge.net</email>
</author>
<published>2014-03-28T16:32:23+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=d02e6760412c7a96abbc4d0add5dd8d5e83bbe27'/>
<id>urn:sha1:d02e6760412c7a96abbc4d0add5dd8d5e83bbe27</id>
<content type='text'>
libXfont-1.4.7
xproto-7.0.25
</content>
</entry>
<entry>
<title>Update following packages:</title>
<updated>2013-10-01T10:28:08+00:00</updated>
<author>
<name>marha</name>
<email>marha@users.sourceforge.net</email>
</author>
<published>2013-10-01T10:23:16+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=6dd755aa923291db2501cc5c22e409c41a70e3c1'/>
<id>urn:sha1:6dd755aa923291db2501cc5c22e409c41a70e3c1</id>
<content type='text'>
libXpm-3.5.11
libXaw-1.0.12
libXfont-1.4.6
libXrender-0.9.8
xproto-7.0.24
inputproto-2.3
xclock-1.0.7
xhost-1.0.6
</content>
</entry>
<entry>
<title>libfontenc xserver pixman mesa git update 5 Mar 2012</title>
<updated>2012-03-05T08:59:38+00:00</updated>
<author>
<name>marha</name>
<email>marha@users.sourceforge.net</email>
</author>
<published>2012-03-05T08:59:38+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=ffe218bbb0ffa6d2a7f7cbf6b1f81797e667183a'/>
<id>urn:sha1:ffe218bbb0ffa6d2a7f7cbf6b1f81797e667183a</id>
<content type='text'>
font-util-1.3.0
xclock-1.0.6
libXfont-1.4.5
inputproto-2.2
</content>
</entry>
<entry>
<title>libXfont-1.4.4</title>
<updated>2011-09-05T08:12:41+00:00</updated>
<author>
<name>marha</name>
<email>marha@users.sourceforge.net</email>
</author>
<published>2011-09-05T08:12:41+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/vcxsrv/commit/?id=6eaea4464631b5d8c1f44a46016163e351028afc'/>
<id>urn:sha1:6eaea4464631b5d8c1f44a46016163e351028afc</id>
<content type='text'>
</content>
</entry>
</feed>
