Rami Ylimäki c1bb8f43b9 record: Prevent out of bounds access when recording a reply. ...

Any pad bytes in replies are written to the client from a zeroed
array. However, record extension tries to incorrectly access the pad
bytes from the end of reply data.

Signed-off-by: Rami Ylimäki <rami.ylimaki@vincit.fi>
Reviewed-by: Erkki Seppälä <erkki.seppala@vincit.fi>

2011-11-18 11:26:02 -08:00

..

.gitignore

dix and os: gitignore dix.O and os.O

2011-09-23 17:14:47 -07:00

access.c

os: Silence warnings when building with clang

2011-04-25 10:45:34 -07:00

auth.c

Constify function prototypes in auth & xdmcp code

2010-05-07 12:22:58 -07:00

backtrace.c

os: Remove Error()

2011-10-11 21:23:46 -07:00

client.c

os/client: Prevent rare fd leak in DetermineClientPid

2011-03-27 18:16:36 -07:00

connection.c

Use internal temp variable for swap macros

2011-09-21 17:12:04 -04:00

io.c

record: Prevent out of bounds access when recording a reply.

2011-11-18 11:26:02 -08:00

log.c

os: Remove Error()

2011-10-11 21:23:46 -07:00

Makefile.am

Don't use empty source files

2011-06-23 05:28:31 -07:00

mitauth.c

Replace X-allocation functions with their C89 counterparts

2010-05-13 00:22:37 +07:00

oscolor.c

Rework symbol visibility for easier maintenance

2008-12-03 05:43:34 -02:00

osdep.h

os: always check if client is local when connection is accepted

2010-12-31 12:52:51 +00:00

osinit.c

Consolidate all the PATH_MAX handling into misc.h

2011-03-14 13:42:55 -04:00

rpcauth.c

Replace X-allocation functions with their C89 counterparts

2010-05-13 00:22:37 +07:00

strcasecmp.c

Remove unnecessary parentheses around return values in functions

2010-06-10 06:42:42 -07:00

strcasestr.c

Remove unnecessary parentheses around return values in functions

2010-06-10 06:42:42 -07:00

strlcat.c

os: include dix-config.h, not xorg-config.h

2010-11-11 08:41:38 +10:00

strlcpy.c

os: include dix-config.h, not xorg-config.h

2010-11-11 08:41:38 +10:00

utils.c

Fix CVE-2011-4029: File permission change vulnerability.

2011-10-18 15:58:00 +02:00

WaitFor.c

os: Reduce smart scheduler setup calls

2011-01-20 21:08:17 -05:00

xdmauth.c

Replace deprecated bzero with memset

2010-06-06 15:07:27 +07:00

xdmcp.c

When XDMCP -from is specified, only register the requested address

2011-03-14 13:11:38 -07:00

xprintf.c

os: Remove Error()

2011-10-11 21:23:46 -07:00

xsha1.c

Replace X-allocation functions with their C89 counterparts

2010-05-13 00:22:37 +07:00

xstrans.c

os: Silence warnings when building with clang

2011-04-25 10:45:34 -07:00