Fix for CVE-2007-5760 - XFree86 Misc extension out of bounds array index
This commit is contained in:
@@ -548,6 +548,10 @@ MiscExtPassMessage(int scrnIndex, const char *msgtype, const char *msgval,
|
|||||||
{
|
{
|
||||||
ScrnInfoPtr pScr = xf86Screens[scrnIndex];
|
ScrnInfoPtr pScr = xf86Screens[scrnIndex];
|
||||||
|
|
||||||
|
/* should check this in the protocol, but xf86NumScreens isn't exported */
|
||||||
|
if (scrnIndex >= xf86NumScreens)
|
||||||
|
return BadValue;
|
||||||
|
|
||||||
if (*pScr->HandleMessage == NULL)
|
if (*pScr->HandleMessage == NULL)
|
||||||
return BadImplementation;
|
return BadImplementation;
|
||||||
return (*pScr->HandleMessage)(scrnIndex, msgtype, msgval, retstr);
|
return (*pScr->HandleMessage)(scrnIndex, msgtype, msgval, retstr);
|
||||||
|
|||||||
Reference in New Issue
Block a user