Skip to content

Possible array out of bounds in glxcmds.c

https://gitlab.freedesktop.org/xorg/xserver/-/blob/master/glx/glxcmds.c#L981-984

        while (p < GLX_VIS_CONFIG_TOTAL) {
            buf[p++] = 0;
            buf[p++] = 0;
        }

probably only one buf[p++] should be used, because second may use invalid memory buf[GLX_VIS_CONFIG_TOTAL]

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information