diff options
| author | Alan Coopersmith <alan.coopersmith@oracle.com> | 2013-05-01 17:59:31 -0700 |
|---|---|---|
| committer | Alan Coopersmith <alan.coopersmith@oracle.com> | 2013-05-23 08:12:13 -0700 |
| commit | 1b33867fa996034deb50819ae54640be501f8d20 (patch) | |
| tree | 9fae9181b758023e052247ee17657eaee521bd4e /doc | |
| parent | e602b653c191e18cbb63db6526aac77c368ed70b (diff) | |
integer overflow in read_packet() [CVE-2013-2064]
Ensure that when calculating the size of the incoming response from the
Xserver, we don't overflow the integer used in the calculations when we
multiply the int32_t length by 4 and add it to the default response size.
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions