[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#660411: libxi6: Memory corruption when used with recent X servers



On Sat, Feb 18, 2012 at 23:55:34 +0100, Michael Karcher wrote:

> This behaviour is observable with current X servers in experimental. As
> heap corruption is a security problem (malign X servers could try to exploit
> client code using Xinput2), fixing this bug might be eligible for a stable
> update.
> 
> Commit
> http://cgit.freedesktop.org/xorg/lib/libXi/commit/?id=635c2c029b1e73311c3f650bcaf7eeb9e782134b
> fixes the problem and applies (with offset and fuzz, though).
> 
Thanks.  I think there were a couple other changes that would be good to
include in the stable version.  I'll try to make sure at least this one
gets into the next update.

Cheers,
Julien

Attachment: signature.asc
Description: Digital signature


Reply to: