diff options
author | Ross Burton <ross.burton@intel.com> | 2015-05-18 17:45:23 +0100 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2015-05-20 21:41:05 +0100 |
commit | c271faed8fa798d5ce80e9679f3bd1226eefa44d (patch) | |
tree | 87a5dfb3f47f9c8b38bba400bacf5c33327ce161 /meta/recipes-graphics/xorg-lib/libxfont/0001-bdfReadProperties-property-count-needs-range-check-C.patch | |
parent | 9c6576b9b9ae7c40122725d0e4268c04ffd0189d (diff) | |
download | poky-c271faed8fa798d5ce80e9679f3bd1226eefa44d.tar.gz |
libxfont: upgrade to 1.5.1
Remove the backported patches as they're integrated in this release.
(From OE-Core rev: 425096a81afcf1f60dad8e74e10b2fe36d72a854)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-graphics/xorg-lib/libxfont/0001-bdfReadProperties-property-count-needs-range-check-C.patch')
-rw-r--r-- | meta/recipes-graphics/xorg-lib/libxfont/0001-bdfReadProperties-property-count-needs-range-check-C.patch | 38 |
1 files changed, 0 insertions, 38 deletions
diff --git a/meta/recipes-graphics/xorg-lib/libxfont/0001-bdfReadProperties-property-count-needs-range-check-C.patch b/meta/recipes-graphics/xorg-lib/libxfont/0001-bdfReadProperties-property-count-needs-range-check-C.patch deleted file mode 100644 index 0779c26dcd..0000000000 --- a/meta/recipes-graphics/xorg-lib/libxfont/0001-bdfReadProperties-property-count-needs-range-check-C.patch +++ /dev/null | |||
@@ -1,38 +0,0 @@ | |||
1 | From 2deda9906480f9c8ae07b8c2a5510cc7e4c59a8e Mon Sep 17 00:00:00 2001 | ||
2 | From: Alan Coopersmith <alan.coopersmith@oracle.com> | ||
3 | Date: Fri, 6 Feb 2015 15:50:45 -0800 | ||
4 | Subject: [PATCH] bdfReadProperties: property count needs range check | ||
5 | [CVE-2015-1802] | ||
6 | |||
7 | Avoid integer overflow or underflow when allocating memory arrays | ||
8 | by multiplying the number of properties reported for a BDF font. | ||
9 | |||
10 | Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com> | ||
11 | Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> | ||
12 | Reviewed-by: Julien Cristau <jcristau@debian.org> | ||
13 | |||
14 | Upstream-Status: backport | ||
15 | |||
16 | Signed-off-by: Li Zhou <li.zhou@windriver.com> | ||
17 | --- | ||
18 | src/bitmap/bdfread.c | 4 +++- | ||
19 | 1 file changed, 3 insertions(+), 1 deletion(-) | ||
20 | |||
21 | diff --git a/src/bitmap/bdfread.c b/src/bitmap/bdfread.c | ||
22 | index 914a024..6387908 100644 | ||
23 | --- a/src/bitmap/bdfread.c | ||
24 | +++ b/src/bitmap/bdfread.c | ||
25 | @@ -604,7 +604,9 @@ bdfReadProperties(FontFilePtr file, FontPtr pFont, bdfFileState *pState) | ||
26 | bdfError("missing 'STARTPROPERTIES'\n"); | ||
27 | return (FALSE); | ||
28 | } | ||
29 | - if (sscanf((char *) line, "STARTPROPERTIES %d", &nProps) != 1) { | ||
30 | + if ((sscanf((char *) line, "STARTPROPERTIES %d", &nProps) != 1) || | ||
31 | + (nProps <= 0) || | ||
32 | + (nProps > ((INT32_MAX / sizeof(FontPropRec)) - BDF_GENPROPS))) { | ||
33 | bdfError("bad 'STARTPROPERTIES'\n"); | ||
34 | return (FALSE); | ||
35 | } | ||
36 | -- | ||
37 | 1.7.9.5 | ||
38 | |||