Attachment 189591 Details for Bug 281921 – Upstream patch against X.Org 7.2 for second issue.

[patch] Upstream patch against X.Org 7.2 for second issue.

xfs-idef2709.diff (text/plain), 1.14 KB, created by Tomas Hoger on 2007-09-07 07:41:46 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tomas Hoger

Created: 2007-09-07 07:41:46 UTC

Size: 1.14 KB

patch

obsolete

>diff --git a/difs/dispatch.c b/difs/dispatch.c
>index f1a0a85..9987ec1 100644
>--- a/difs/dispatch.c
>+++ b/difs/dispatch.c
>@@ -933,6 +933,13 @@ ProcQueryXExtents(ClientPtr client)
>     }
>     item_size = (stuff->reqType == FS_QueryXExtents8) ? 1 : 2;
> 
>+    if (stuff->num_ranges >
>+	 (stuff->length<<2 - SIZEOF(fsQueryXExtents8Req)/item_size)) {
>+	int num_ranges = stuff->num_ranges;
>+	SendErrToClient(client, FSBadLength, (pointer)&num_ranges);
>+	return FSBadLength;
>+    }
>+		
>     /* get the extents */
>     err = QueryExtents(client, cfp, item_size,
> 		       stuff->num_ranges, stuff->range,
>@@ -969,6 +976,12 @@ ProcQueryXBitmaps(ClientPtr client)
>     assert((stuff->reqType == FS_QueryXBitmaps8) || (stuff->reqType == FS_QueryXBitmaps16));
>     item_size = (stuff->reqType == FS_QueryXBitmaps8) ? 1 : 2;
> 
>+    if (stuff->num_ranges > 
>+	(stuff->length << 2 - SIZEOF(fsQueryXBitmaps8Req))/item_size) {
>+	int num_ranges = stuff->num_ranges;
>+	SendErrToClient(client, FSBadLength, (pointer)&num_ranges);
>+	return FSBadLength;
>+    }
>     /* get the glyphs */
>     err = QueryBitmaps(client, cfp, item_size, stuff->format,
> 		       stuff->num_ranges, stuff->range,

Actions: View | Diff

Attachments on bug 281921: 189581 | 189591 | 197041