mirror of
https://github.com/X11Libre/xserver.git
synced 2026-10-27 02:09:56 +00:00
| Filename | Latest commit message | Latest commit date |
|---|---|---|
2a344f200a
Some checks failed
Build X servers / xserver-build-ubuntu (push) Has been cancelled
Build X servers / drivers-build-ubuntu (push) Has been cancelled
Build X servers / xserver-build-mingw32-ubuntu (push) Has been cancelled
Build X servers / xserver-build-macos (push) Has been cancelled
Build X servers / xserver-build-freebsd (push) Has been cancelled
Build X servers / xserver-build-dragonflybsd (push) Has been cancelled
Build X servers / xserver-build-netbsd (push) Has been cancelled
Build X servers / xserver-build-cygwin (push) Has been cancelled
Build X servers / Release pushed tag (push) Has been cancelled
In PropModePrepend mode, old_data was offset by prop_value->size *
size_in_bytes instead of len * size_in_bytes, causing a heap buffer
overflow whenever the existing property is larger than the new data
being prepended.
Additionally, new_value.size was set to len instead of total_len in
Append and Prepend modes, causing the stored property size to reflect
only the new elements rather than the full property after the operation.
rrproperty.c (the RROutput equivalent) already has both correct forms,
this brings rrproviderproperty.c in line with it.
Signed-off-by: Victor Lev <levvictor123@gmail.com>
(cherry picked from commit
|
||
| .. | ||
| meson.build | ||
| randr.c | ||
| randrstr.h | ||
| randrstr_priv.h | ||
| rrcrtc.c | ||
| rrdispatch.c | ||
| rrdispatch_priv.h | ||
| rrinfo.c | ||
| rrlease.c | ||
| rrmode.c | ||
| rrmonitor.c | ||
| rroutput.c | ||
| rrpointer.c | ||
| rrproperty.c | ||
| rrprovider.c | ||
| rrproviderproperty.c | ||
| rrscreen.c | ||
| rrtransform.c | ||
| rrtransform.h | ||
| rrxinerama.c | ||