libXv is the Xlib-based client library for the X Video (Xv) extension. This quick fix release corrects an issue with the security fix from 1.0.8, in which, if the size checks did determine the response from the X server was too large to fit in the buffer it had allocated, XvQueryPortAttributes could return a pointer to the caller that pointed to uninitialized memory where the caller expected a nil-terminated string.
Alan Coopersmith (2):
XvQueryPortAttributes: add a comment explaining memory strategy
libXv 1.0.9
Daphne Pfister (1):
Bug 65252: Ensure final name is nil-terminated & none point to
uninitialized memory.
git tag: libXv-1.0.9
http://xorg.freedesktop.org/archive/individual/lib/libXv-1.0.9.tar.bz2
MD5: 3f642e1d868a2289769b983cf346e7bb
SHA1: cf6d40664b436673f92ed15bc4fadb6bc8d7ce26
SHA256: a874dbf864d0271bbe795af67ef5b3f20096c92fc11eacbf0d2af00e32bc5b4b
http://xorg.freedesktop.org/archive/individual/lib/libXv-1.0.9.tar.gz
MD5: d4b602ff83a2f676e43bc52f5fa37252
SHA1: f5227997a614cff1afcc19c5eb8ae4c184b0cb12
SHA256: d9deb163fbfd72b39581b18d64ae2261e9d8db7aa1bb2d3dab27b1fceab53174
--
-Alan Coopersmith- alan.coopersm...@oracle.com
Oracle Solaris Engineering - http://blogs.oracle.com/alanc
pgpUxZPTNF5UZ.pgp
Description: PGP signature
_______________________________________________ xorg-announce mailing list xorg-announce@lists.x.org http://lists.x.org/mailman/listinfo/xorg-announce
