summaryrefslogtreecommitdiff
path: root/COPYING
diff options
context:
space:
mode:
authorTobias Stoeckmann <tobias@stoeckmann.org>2016-09-25 21:37:01 +0200
committerMatthieu Herrb <matthieu@herrb.eu>2016-09-25 21:37:01 +0200
commit9556ad67af3129ec4a7a4f4b54a0d59701beeae3 (patch)
tree5d727cf2ee5718a01c9069fa20747711bbf166f3 /COPYING
parent48d2656fa1dd98e9d88b31211fa4f09f813e7b30 (diff)
Out of boundary access and endless loop in libXtst
A lack of range checks in libXtst allows out of boundary accesses. The checks have to be done in-place here, because it cannot be done without in-depth knowledge of the read data. If XRecordStartOfData, XRecordEndOfData, or XRecordClientDied without a client sequence have attached data, an endless loop would occur. The do-while-loop continues until the current index reaches the end. But in these cases, the current index would not be incremented, leading to an endless processing. Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org> Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Diffstat (limited to 'COPYING')
0 files changed, 0 insertions, 0 deletions