xserver icon indicating copy to clipboard operation
xserver copied to clipboard

xfree86: device parser fix crash with duplicate "Clocks" property

Open GermanAizek opened this issue 3 months ago • 1 comments

Related to issue: https://github.com/X11Libre/xserver/issues/1407

This commit fixes when processing the first line, the clock frequency value ptr->dev_clocks is 0. If the first line of the clock frequency contains 100 values, the clock frequency value ptr->dev_clocks will be 100. When processing the second row "Clocks", which contains, for example, 100 more values, the loop will start with i = 100. This will cause 72 values to be written outside the 128-element dev_block array, which will lead to buffer overflow and an emergency crash xserver.

GermanAizek avatar Nov 16 '25 02:11 GermanAizek

does this also need to be backported to maint-25.0 ?

metux avatar Nov 22 '25 12:11 metux