diff options
author | Tobias Stoeckmann <tobias@stoeckmann.org> | 2016-09-25 21:37:01 +0200 |
---|---|---|
committer | Matthieu Herrb <matthieu@herrb.eu> | 2016-09-25 21:37:01 +0200 |
commit | 9556ad67af3129ec4a7a4f4b54a0d59701beeae3 (patch) | |
tree | 5d727cf2ee5718a01c9069fa20747711bbf166f3 /include | |
parent | 48d2656fa1dd98e9d88b31211fa4f09f813e7b30 (diff) |
Out of boundary access and endless loop in libXtst
A lack of range checks in libXtst allows out of boundary accesses.
The checks have to be done in-place here, because it cannot be done
without in-depth knowledge of the read data.
If XRecordStartOfData, XRecordEndOfData, or XRecordClientDied
without a client sequence have attached data, an endless loop would
occur. The do-while-loop continues until the current index reaches
the end. But in these cases, the current index would not be
incremented, leading to an endless processing.
Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions