This bug was fixed in the package libxi - 2:1.4.1-1ubuntu3
---------------
libxi (2:1.4.1-1ubuntu3) oneiric; urgency=low
* Add 100_len_raw_events.patch: Cherrypick upstream patch to correct the
use of the calculated structure length for memory allocations. Fixes
issue where incorrect memory size was allocated, leading to valuator
data overwriting memory, resulting in an error "Invalid write of size
1" and heap corruption causing applications to crash when they use Raw
Events. (LP: #770522)
-- Bryce Harrington <[email protected]> Thu, 05 May 2011 14:11:39 -0700
** Changed in: libxi (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to libxi in Ubuntu.
https://bugs.launchpad.net/bugs/770522
Title:
copyRawEvent() copies data outside of allocated space causing heap
corruption
_______________________________________________
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to : [email protected]
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help : https://help.launchpad.net/ListHelp
