Michal Srb
05442de962
Xi: Zero target buffer in SProcXSendExtensionEvent.
...
Make sure that the xEvent eventT is initialized with zeros, the same way as
in SProcSendEvent.
Some event swapping functions do not overwrite all 32 bytes of xEvent
structure, for example XSecurityAuthorizationRevoked. Two cooperating
clients, one swapped and the other not, can send
XSecurityAuthorizationRevoked event to each other to retrieve old stack data
from X server. This can be potentialy misused to go around ASLR or
stack-protector.
Signed-off-by: Michal Srb <msrb@suse.com >
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net >
Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net >
2017-06-19 11:58:44 +10:00
..
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-05-14 13:17:30 +01:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2016-11-29 18:44:54 +10:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2014-03-27 14:09:43 +00:00
2017-04-26 15:25:27 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-06-19 11:58:44 +10:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2016-10-26 15:35:07 +10:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2013-05-07 09:41:19 +10:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-03-01 10:16:20 -05:00
2012-03-21 13:54:42 -07:00
2017-06-07 14:49:04 +10:00
2012-03-21 13:54:42 -07:00