-
Mike DePaulo authored
CVE-2014-0210: unvalidated length fields in fs_read_list() from xorg/lib/libXfont commit 5fa73ac18474be3032ee7af9c6e29deab163ea39 fs_read_list() parses a reply from the font server. The reply contains a list of strings with embedded length fields, none of which are validated. This can cause out of bound reads when looping over the strings in the reply.
ef439da3
| Name |
Last commit
|
Last update |
|---|---|---|
| .. | ||
| Imakefile | ||
| fsconvert.c | ||
| fserve.c | ||
| fserve.h | ||
| fservestr.h | ||
| fsio.c | ||
| fsio.h | ||
| fsio.h.NX.reference | ||
| fsio.h.XF86.reference | ||
| fslibos.h |