xfixes: unvalidated length in SProcXFixesSelectSelectionInput [CVE-2014-8102]
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
(cherry picked from commit a0ece23a8b
)
Signed-off-by: Julien Cristau <jcristau@debian.org>
This commit is contained in:
parent
18c7f1e49b
commit
4f30f4dd47
|
@ -201,6 +201,7 @@ SProcXFixesSelectSelectionInput(ClientPtr client)
|
|||
{
|
||||
REQUEST(xXFixesSelectSelectionInputReq);
|
||||
|
||||
REQUEST_SIZE_MATCH(xXFixesSelectSelectionInputReq);
|
||||
swaps(&stuff->length);
|
||||
swapl(&stuff->window);
|
||||
swapl(&stuff->selection);
|
||||
|
|
Loading…
Reference in New Issue