libXfont: Changes to 'master'

GitLab Mirror gitlab-mirror at kemper.freedesktop.org
Wed Jul 14 16:29:01 UTC 2021


 src/fontfile/fontdir.c |    5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

New commits:
commit daff8876379c64c7bee126319af804896f83b5da
Author: Alex Richardson <Alexander.Richardson at cl.cam.ac.uk>
Date:   Wed Jul 14 17:23:48 2021 +0100

    Fix out-of-bounds read in FontFileMakeDir()
    
    BuiltinReadDirectory() calls FontFileMakeDir ("", builtin_dir_count); and
    this causes the `dirName[dirlen - 1]` access to read before the start of
    the string. I found this while porting Xvnc to CHERI-RISC-V (which has
    bounds and permissions on all pointers).



More information about the xorg-commit mailing list