[This e-mail has been automatically generated.]  
 
http://bugs.xfree86.org//cgi-bin/bugzilla/show_bug.cgi?id=40    
    
           Summary: Segfault in XOpenDisplay
           Product: Client Libraries
           Version: 4.3
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: xlib
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


XOpenDisplay does not check that it has received as much data as needed. If the
"length of additional data"-field is set too low the function will happily read
uninitialized memory. If the number of screens/visuals/etc is set large enough,
it will segfault.

It is not a security problem as far as I can see, however, the memmove after the
vendor string does make me nervous.    
    
    
    
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
XFree86 mailing list
[EMAIL PROTECTED]
http://XFree86.Org/mailman/listinfo/xfree86

Reply via email to