Tobias Stoeckmann 40c12a76c2 record: Fix OOB access in ProcRecordUnregisterClients ...

If a client sends a RecordUnregisterClients request with an nClients
field larger than INT_MAX / 4, an integer overflow leads to an
out of boundary access in RecordSanityCheckClientSpecifiers.

An example line with libXtst would be:
XRecordUnregisterClients(dpy, rc, clients, 0x40000001);

Reviewed-by: Adam Jackson <ajax@redhat.com>

2017-03-20 15:19:12 -04:00

..

Makefile.am

get rid of XFree86LOADER, XFree86Server, XFree86Module, and IN_MODULE

2006-07-18 18:17:38 -04:00

record.c

record: Fix OOB access in ProcRecordUnregisterClients

2017-03-20 15:19:12 -04:00

set.c

Convert top level extensions to new *allocarray functions

2015-04-21 16:57:08 -07:00

set.h

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00