forked from pool/xorg-x11-server
Stefan Dirsch
ac6d09dc19
* DeepCopyPointerClasses use-after-free (CVE-2023-0494,
ZDI-CAN-19596, bsc#1207783)
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=851
21 lines
598 B
Diff
21 lines
598 B
Diff
@@ -, +, @@
|
|
DeepCopyPointerClasses
|
|
---
|
|
Xi/exevents.c | 4 +++-
|
|
1 file changed, 3 insertions(+), 1 deletion(-)
|
|
--- a/Xi/exevents.c
|
|
+++ a/Xi/exevents.c
|
|
@@ -619,8 +619,10 @@ DeepCopyPointerClasses(DeviceIntPtr from, DeviceIntPtr to)
|
|
memcpy(to->button->xkb_acts, from->button->xkb_acts,
|
|
sizeof(XkbAction));
|
|
}
|
|
- else
|
|
+ else {
|
|
free(to->button->xkb_acts);
|
|
+ to->button->xkb_acts = NULL;
|
|
+ }
|
|
|
|
memcpy(to->button->labels, from->button->labels,
|
|
from->button->numButtons * sizeof(Atom));
|
|
--
|