Skip to content
Snippets Groups Projects
Commit 84fb1457 authored by Alan Coopersmith's avatar Alan Coopersmith
Browse files

Avoid CVE-2023-43786: stack exhaustion in XPutImage()


This doesn't fix the CVE - that has to happen in libX11, this
just tries to avoid triggering it from libXpm, and saves time
in not pretending we can successfully create an X11 pixmap with
dimensions larger than the unsigned 16-bit integers used in the
X11 protocol for the dimensions.

Reported by Yair Mizrahi of the JFrog Vulnerability Research team

Signed-off-by: default avatarAlan Coopersmith <alan.coopersmith@oracle.com>
parent edb97396
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment