wayland/src
Michal Srb f7fdface41 connection: Prevent pointer overflow from large lengths.
If the remote side sends sufficiently large `length` field, it will
overflow the `p` pointer. Technically it is undefined behavior, in
practice it makes `p < end`, so the length check passes. Attempts to
access the data later causes crashes.

This issue manifests only on 32bit systems, but the behavior is
undefined everywhere.
Reviewed-by: Pekka Paalanen <pekka.paalanen@collabora.co.uk>
Reviewed-by: Derek Foreman <derek.foreman.samsung@gmail.com>
2018-08-17 10:59:20 -05:00
..
.gitignore ignore: Add *.dtd.embed 2016-03-10 22:24:20 -08:00
connection.c connection: Prevent pointer overflow from large lengths. 2018-08-17 10:59:20 -05:00
dtddata.S dtddata: Use standard permission notice 2017-01-26 14:49:55 +00:00
event-loop.c eventloop: clarify post_dispatch_check() 2017-12-04 19:45:38 +00:00
scanner.c scanner: allow referencing foreign enums 2018-06-07 11:52:06 +03:00
wayland-client-core.h (multiple): Include stdint.h 2016-07-25 18:39:32 -07:00
wayland-client-uninstalled.pc.in build: remove white space in -uninstalled.pc.in files 2018-02-16 14:41:08 +00:00
wayland-client.c client: remove definition of wl_global 2018-06-28 14:35:40 +03:00
wayland-client.h doc: Formalize file comment in wayland-client.h, wayland-server.h 2016-05-11 11:03:27 -07:00
wayland-client.pc.in Export the Wayland protocol XML file 2013-09-21 21:48:56 -07:00
wayland-os.c src: Update boilerplate from MIT X11 license to MIT Expat license 2015-06-12 15:31:24 -07:00
wayland-os.h src: Update boilerplate from MIT X11 license to MIT Expat license 2015-06-12 15:31:24 -07:00
wayland-private.h server: Add special case destroy signal emitter 2018-04-20 13:19:13 -05:00
wayland-scanner-uninstalled.pc.in build: remove white space in -uninstalled.pc.in files 2018-02-16 14:41:08 +00:00
wayland-scanner.pc.in build: Add wayland-scanner.pc. 2013-07-03 16:38:12 -04:00
wayland-server-core.h server: add wl_display_destroy_clients() 2018-02-09 17:00:04 +00:00
wayland-server-uninstalled.pc.in build: remove white space in -uninstalled.pc.in files 2018-02-16 14:41:08 +00:00
wayland-server.c server: Add special case destroy signal emitter 2018-04-20 13:19:13 -05:00
wayland-server.h wayland-server: Finally remove deprecated struct wl_buffer definition 2018-07-25 12:08:16 -05:00
wayland-server.pc.in Export the Wayland protocol XML file 2013-09-21 21:48:56 -07:00
wayland-shm.c shm: provide actual error on mmap failed 2018-02-09 17:03:28 +00:00
wayland-util.c client: Remove WL_ZOMBIE_OBJECT global 2017-12-28 19:43:20 +00:00
wayland-util.h doc: Document behavior of non-nullable object arguments in clients 2018-02-09 10:06:33 +02:00
wayland-version.h.in src: Update boilerplate from MIT X11 license to MIT Expat license 2015-06-12 15:31:24 -07:00