Fix for CVE-2007-6428 - TOG-cup extension memory corruption.
This commit is contained in:
parent
dd5e0f5cd5
commit
7dc1717ff0
|
@ -176,6 +176,9 @@ int ProcGetReservedColormapEntries(
|
||||||
|
|
||||||
REQUEST_SIZE_MATCH (xXcupGetReservedColormapEntriesReq);
|
REQUEST_SIZE_MATCH (xXcupGetReservedColormapEntriesReq);
|
||||||
|
|
||||||
|
if (stuff->screen >= screenInfo.numScreens)
|
||||||
|
return BadValue;
|
||||||
|
|
||||||
#ifndef HAVE_SPECIAL_DESKTOP_COLORS
|
#ifndef HAVE_SPECIAL_DESKTOP_COLORS
|
||||||
citems[CUP_BLACK_PIXEL].pixel =
|
citems[CUP_BLACK_PIXEL].pixel =
|
||||||
screenInfo.screens[stuff->screen]->blackPixel;
|
screenInfo.screens[stuff->screen]->blackPixel;
|
||||||
|
|
Loading…
Reference in New Issue