From 5c340ceb9356ea029dea53b73440268d4769d5a5 Mon Sep 17 00:00:00 2001
From: marha <marha@users.sourceforge.net>
Date: Tue, 23 Jul 2013 09:20:51 +0200
Subject: libX11 libXmu mesa xserver git update 23 July 2013

xserver          commit d5ebe20f9ba9569351c4a41449866679fd60ba45
libX11           commit feb131b18aee31c2c125dc3275b0260940245882
libXmu           commit d5dac08d65c4865f311cb62c161dbb1300eecd11
mesa             commit 5a7bdd4b4173958c53109517b7c95f1039623e7e
---
 libX11/src/XlibInt.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'libX11/src/XlibInt.c')

diff --git a/libX11/src/XlibInt.c b/libX11/src/XlibInt.c
index 92a434004..7521f12ad 100644
--- a/libX11/src/XlibInt.c
+++ b/libX11/src/XlibInt.c
@@ -1733,6 +1733,14 @@ void *_XGetRequest(Display *dpy, CARD8 type, size_t len)
 
     if (dpy->bufptr + len > dpy->bufmax)
 	_XFlush(dpy);
+    /* Request still too large, so do not allow it to overflow. */
+    if (dpy->bufptr + len > dpy->bufmax) {
+	fprintf(stderr,
+		"Xlib: request %d length %zd would exceed buffer size.\n",
+		type, len);
+	/* Changes failure condition from overflow to NULL dereference. */
+	return NULL;
+    }
 
     if (len % 4)
 	fprintf(stderr,
-- 
cgit v1.2.3