Keith Packard b20912c3d4 dbe: Call to DDX SwapBuffers requires address of int, not unsigned int [CVE-2014-8097 pt. 2] ...

When the local types used to walk the DBE request were changed, this
changed the type of the parameter passed to the DDX SwapBuffers API,
but there wasn't a matching change in the API definition.

At this point, with the API frozen, I just stuck a new variable in
with the correct type. Because we've already bounds-checked nStuff to
be smaller than UINT32_MAX / sizeof(DbeSwapInfoRec), we know it will
fit in a signed int without overflow.

Signed-off-by: Keith Packard <keithp@keithp.com
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

2014-12-09 11:26:58 -08:00

..

dbe.c

dbe: Call to DDX SwapBuffers requires address of int, not unsigned int [CVE-2014-8097 pt. 2]

2014-12-09 11:26:58 -08:00

dbestruct.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

Makefile.am

dbe: Fold the window private private into the window private

2013-09-10 13:28:24 -04:00

midbe.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

midbe.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00