Skip to content
Snippets Groups Projects
Commit 304a654a authored by Alan Coopersmith's avatar Alan Coopersmith
Browse files

InitExt.c: Add bounds checks for extension request, event, & error codes


Fixes CVE-2023-3138: X servers could return values from XQueryExtension
that would cause Xlib to write entries out-of-bounds of the arrays to
store them, though this would only overwrite other parts of the Display
struct, not outside the bounds allocated for that structure.

Reported-by: default avatarGregory James DUCK <gjduck@gmail.com>
Signed-off-by: default avatarAlan Coopersmith <alan.coopersmith@oracle.com>
parent 71b08b8a
No related branches found
No related tags found
1 merge request!212libX11 1.8.6, including fix for CVE-2023-3138
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment