[PATCH]Possible out of bounds array access in mieqEnqueue()

Luo Jie luojie at nlsde.buaa.edu.cn
Wed Mar 28 22:59:04 PDT 2007

Function mieqEnqueue() in mi/mieq.c have possibility of out of bound 
array access. When oldtail == 0, laste = &miEventQueue.events[oldtail 
-1] is not a valid access to miEventQueue.events.
Here is a patch to fix this *except* the case that the first event 
insert using mieqEnqueue() has type DeviceValuator.

Any idea?
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: mieq.patch
URL: <http://lists.x.org/archives/xorg/attachments/20070329/f9a343da/attachment.ksh>

More information about the xorg mailing list