diff options
author | Dave Airlie <airlied@redhat.com> | 2013-05-24 14:47:30 +1000 |
---|---|---|
committer | Dave Airlie <airlied@redhat.com> | 2013-05-24 14:47:30 +1000 |
commit | 8c164524d229adb6141fdac8336b3823e7fe1a5d (patch) | |
tree | aa3ebc16cc5f87c100e247bd5cedaab6469587fa /src/XvMC.c | |
parent | e9415ddef2ac81d4139bd32d5e9cda9394a60051 (diff) |
Multiple unvalidated patches in CVE-2013-1999
Al Viro pointed out that Debian started segfaulting in Xine for him,
Reported-by: Al Viro
Signed-off-by: Dave Airlie <airlied@redhat.com>
Diffstat (limited to 'src/XvMC.c')
-rw-r--r-- | src/XvMC.c | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -585,15 +585,15 @@ Status XvMCGetDRInfo(Display *dpy, XvPortID port, if (*name && *busID && tmpBuf) { _XRead(dpy, tmpBuf, realSize); strncpy(*name,tmpBuf,rep.nameLen); - name[rep.nameLen - 1] = '\0'; + (*name)[rep.nameLen - 1] = '\0'; strncpy(*busID,tmpBuf+rep.nameLen,rep.busIDLen); - busID[rep.busIDLen - 1] = '\0'; + (*busID)[rep.busIDLen - 1] = '\0'; XFree(tmpBuf); } else { XFree(*name); *name = NULL; XFree(*busID); - *name = NULL; + *busID = NULL; XFree(tmpBuf); _XEatDataWords(dpy, rep.length); |