diff options
| author | Alan Coopersmith <alan.coopersmith@oracle.com> | 2015-01-05 22:52:39 -0800 |
|---|---|---|
| committer | Alan Coopersmith <alan.coopersmith@oracle.com> | 2015-01-09 22:00:04 -0800 |
| commit | 723f4a1430dad0d495e3c83c7c95edb94e9f4304 (patch) | |
| tree | f7134cd5226ad87f076a53086b87c3479c007527 /include | |
| parent | f3cdbabadd4626a030e3ac139a333450a462e055 (diff) | |
Discard correct length for old-format replies in XF86VidModeGetGamma
Regression introduced in libXxf86vm 1.1.3 / commit 284a88e21fc05a63466
Unlikely to be hit in practice since it requires out-of-range privsize
or malloc failure while talking to a server using the XFree86 3.x version
of the protocol.
Found by Oracle Parfait 1.5.1:
Error: Uninitialised memory (CWE 456)
Possible access to uninitialised memory '&rep.length'
at line 279 of open-src/lib/libXxf86vm/unpacked-src/src/XF86VMode.c in function 'XF86VidModeGetModeLine'.
&rep.length allocated at line 218.
&rep.length uninitialised when majorVersion < 2 at line 233.
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions