aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMike DePaulo <mikedep333@gmail.com>2014-04-05 12:03:22 -0400
committerMike DePaulo <mikedep333@gmail.com>2014-04-05 12:03:22 -0400
commit1c038fd0033fc8ba7dcc6b306ce218640365ffbb (patch)
tree934e03ffa73da54a7e2b64e9a6824d19da09bfa8
parent0ab0f870694adbca389833d62e4514b92c13e8bc (diff)
downloadvcxsrv-1c038fd0033fc8ba7dcc6b306ce218640365ffbb.tar.gz
vcxsrv-1c038fd0033fc8ba7dcc6b306ce218640365ffbb.tar.bz2
vcxsrv-1c038fd0033fc8ba7dcc6b306ce218640365ffbb.zip
Fix CVE-2013-6462 (2014-01-07). The fix is included in upstream libXfont 1.4.7 .
-rw-r--r--libXfont/src/bitmap/bdfread.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libXfont/src/bitmap/bdfread.c b/libXfont/src/bitmap/bdfread.c
index e2770dc1c..e11c5d266 100644
--- a/libXfont/src/bitmap/bdfread.c
+++ b/libXfont/src/bitmap/bdfread.c
@@ -338,7 +338,7 @@ bdfReadCharacters(FontFilePtr file, FontPtr pFont, bdfFileState *pState,
char charName[100];
int ignore;
- if (sscanf((char *) line, "STARTCHAR %s", charName) != 1) {
+ if (sscanf((char *) line, "STARTCHAR %99s", charName) != 1) {
bdfError("bad character name in BDF file\n");
goto BAILOUT; /* bottom of function, free and return error */
}