Files
xserver/os
Peter Harris 4b0d0df34f Fix overflow of ConnectionOutput->size and ->count
When (long) is larger than (int), and when realloc succeeds with sizes
larger than INT_MAX, ConnectionOutput->size and ConnectionOutput->count
overflow and become negative.

When ConnectionOutput->count is negative, InsertIOV does not actually
insert an IOV, and FlushClient goes into an infinite loop of writev(fd,
iov, 0) [an empty list].

Avoid this situation by killing the client when it has more than INT_MAX
unread bytes of data.

Signed-off-by: Peter Harris <pharris@opentext.com>
Reviewed-by: Keith Packard <keithp@keithp.com>
Signed-off-by: Keith Packard <keithp@keithp.com>
2014-11-30 11:37:56 -08:00
..
2014-11-12 10:25:00 +10:00
2014-01-12 10:14:49 -08:00
2014-11-12 10:25:00 +10:00
2012-03-21 13:54:42 -07:00
2014-11-12 10:25:00 +10:00
2012-03-21 13:54:42 -07:00
2014-11-12 10:25:00 +10:00
2014-11-12 10:25:00 +10:00
2014-11-12 10:25:00 +10:00
2014-01-12 10:24:11 -08:00
2012-03-21 13:54:42 -07:00
2012-03-21 13:54:42 -07:00
2014-11-12 10:25:00 +10:00
2014-01-22 19:56:31 -08:00
2014-11-12 10:25:00 +10:00
2013-10-31 16:58:12 -07:00