xserver-multidpi/hw/xfree86/vbe
Adam Jackson d8caa78200 vbe: Fix malloc size bug
v2: Slightly more obvious sizing math.

==14882== Invalid write of size 2
==14882==    at 0x6750267: VBEGetVBEInfo (vbe.c:400)
==14882==    by 0x6142064: ??? (in /usr/lib64/xorg/modules/drivers/vesa_drv.so)
==14882==    by 0x471895: InitOutput (xf86Init.c:519)
==14882==    by 0x422778: main (main.c:205)
==14882==  Address 0x4f32fa8 is 72 bytes inside a block of size 73 alloc'd
==14882==    at 0x4A0640D: malloc (vg_replace_malloc.c:236)
==14882==    by 0x675024B: VBEGetVBEInfo (vbe.c:398)
==14882==    by 0x6142064: ??? (in /usr/lib64/xorg/modules/drivers/vesa_drv.so)
==14882==    by 0x471895: InitOutput (xf86Init.c:519)
==14882==    by 0x422778: main (main.c:205)

Reviewed-by: Mark Kettenis <kettenis@openbsd.org>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Adam Jackson <ajax@redhat.com>
2011-03-04 16:11:03 -05:00
..
Makefile.am Remove smashing of CFLAGS from server build. 2006-09-18 12:11:18 -07:00
vbe_module.c xfree86: Remove useless module setup functions where appropriate 2010-09-22 10:57:22 -04:00
vbe.c vbe: Fix malloc size bug 2011-03-04 16:11:03 -05:00
vbe.h vbe.h: Use __attribute__((packed)) on Sun cc 5.9 & later as well as gcc 2010-05-21 09:45:06 -07:00
vbeModes.c Convert alloc+sprintf pairs into asprintf() & XNFasprintf() calls 2010-12-07 11:10:35 -08:00
vbeModes.h Rework symbol visibility for easier maintenance 2008-12-03 05:43:34 -02:00