xserver-multidpi/dbe
Keith Packard b20912c3d4 dbe: Call to DDX SwapBuffers requires address of int, not unsigned int [CVE-2014-8097 pt. 2]
When the local types used to walk the DBE request were changed, this
changed the type of the parameter passed to the DDX SwapBuffers API,
but there wasn't a matching change in the API definition.

At this point, with the API frozen, I just stuck a new variable in
with the correct type. Because we've already bounds-checked nStuff to
be smaller than UINT32_MAX / sizeof(DbeSwapInfoRec), we know it will
fit in a signed int without overflow.

Signed-off-by: Keith Packard <keithp@keithp.com
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2014-12-09 11:26:58 -08:00
..
Makefile.am dbe: Fold the window private private into the window private 2013-09-10 13:28:24 -04:00
dbe.c dbe: Call to DDX SwapBuffers requires address of int, not unsigned int [CVE-2014-8097 pt. 2] 2014-12-09 11:26:58 -08:00
dbestruct.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
midbe.c Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
midbe.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00