[ANNOUNCE] libXv 1.0.9

Alan Coopersmith alan.coopersmith at oracle.com
Sat Jun 22 19:12:08 PDT 2013


libXv is the Xlib-based client library for the X Video (Xv) extension.

This quick fix release corrects an issue with the security fix from 1.0.8,
in which, if the size checks did determine the response from the X server
was too large to fit in the buffer it had allocated, XvQueryPortAttributes
could return a pointer to the caller that pointed to uninitialized memory
where the caller expected a nil-terminated string.

Alan Coopersmith (2):
      XvQueryPortAttributes: add a comment explaining memory strategy
      libXv 1.0.9

Daphne Pfister (1):
      Bug 65252: Ensure final name is nil-terminated & none point to uninitialized memory.

git tag: libXv-1.0.9

http://xorg.freedesktop.org/archive/individual/lib/libXv-1.0.9.tar.bz2
MD5:  3f642e1d868a2289769b983cf346e7bb
SHA1: cf6d40664b436673f92ed15bc4fadb6bc8d7ce26
SHA256: a874dbf864d0271bbe795af67ef5b3f20096c92fc11eacbf0d2af00e32bc5b4b

http://xorg.freedesktop.org/archive/individual/lib/libXv-1.0.9.tar.gz
MD5:  d4b602ff83a2f676e43bc52f5fa37252
SHA1: f5227997a614cff1afcc19c5eb8ae4c184b0cb12
SHA256: d9deb163fbfd72b39581b18d64ae2261e9d8db7aa1bb2d3dab27b1fceab53174

-- 
	-Alan Coopersmith-              alan.coopersmith at oracle.com
	 Oracle Solaris Engineering - http://blogs.oracle.com/alanc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://lists.x.org/archives/xorg-announce/attachments/20130622/3b792c48/attachment.pgp>


More information about the xorg-announce mailing list