]> code.ossystems Code Review - openembedded-core.git/commit
libxfont: Security Advisory - libxfont - CVE-2015-1802
authorLi Zhou <li.zhou@windriver.com>
Thu, 23 Apr 2015 09:20:06 +0000 (17:20 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 15 May 2015 17:12:11 +0000 (18:12 +0100)
commitddc4889d7028d0388b1521d49ab1d3b8decba524
tree627cfb9a4efecc2c69f01f740ce34afd6f169bea
parentc944c1ee3f039979d93022bbbd76f61f57b1577f
libxfont: Security Advisory - libxfont - CVE-2015-1802

bdfReadProperties: property count needs range check

Avoid integer overflow or underflow when allocating memory arrays
by multiplying the number of properties reported for a BDF font.

(From OE-Core rev: 0ff9f2bf0e44a7b47a98234a12714c780825e286)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-graphics/xorg-lib/libxfont/0001-bdfReadProperties-property-count-needs-range-check-C.patch [new file with mode: 0644]
meta/recipes-graphics/xorg-lib/libxfont_1.5.0.bb