xserver-multidpi/hw/xfree86
Alan Coopersmith 6692670fde dri2: integer overflow in ProcDRI2GetBuffers() [CVE-2014-8094]
ProcDRI2GetBuffers() tries to validate a length field (count).
There is an integer overflow in the validation. This can cause
out of bound reads and memory corruption later on.

Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Reviewed-by: Julien Cristau <jcristau@debian.org>
2014-12-08 18:09:47 -08:00
..
common Merge remote-tracking branch 'whot/for-keith' 2014-11-24 15:39:51 -08:00
ddc Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
dixmods Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
doc xfree86: Remove the memory of MTRR awareness 2014-09-16 11:58:53 -04:00
dri Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
dri2 dri2: integer overflow in ProcDRI2GetBuffers() [CVE-2014-8094] 2014-12-08 18:09:47 -08:00
drivers modesetting: Remove unused params from drmmode_output_init() 2014-12-08 15:49:46 -08:00
exa xfree86/exa: xf86GetOptValString returns const char * now 2014-01-12 10:14:50 -08:00
fbdevhw Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
glamor_egl glamor: Share code for put_image handling. 2014-06-15 23:20:09 +01:00
i2c Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
int10 int10: Port off xf86ReadBIOS 2014-09-16 11:58:53 -04:00
loader Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
man xfree86: Remove Option "TextClockFreq" 2014-09-26 15:27:18 -04:00
modes Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
os-support Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
parser Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
ramdac Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
shadowfb Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
utils Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
vbe Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
vgahw Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
x86emu Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
.gitignore Xorg: Add Xorg.wrap to hw/xfree86/.gitignore 2014-04-18 11:39:16 +02:00
Makefile.am xfree86: Include 'drivers' directory with distribution 2014-10-28 21:31:40 -07:00
sdksyms.sh mi: Fold mifpolycon.c into miarc.c 2014-10-27 15:45:24 -04:00
xorg-wrapper.c Xorg.wrap: Make the console check portable 2014-04-18 11:40:09 +02:00
Xorg.sh.in Xorg: Add a suid root wrapper 2014-03-12 08:50:05 +01:00
xorgconf.cpp xfree86: fix wrong DontZap documentation (#71113) 2014-05-24 20:02:56 +10:00