]> source.dussan.org Git - tigervnc.git/commit
projects / tigervnc.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e25272f) | patch
Fix buffer overflow in ModifiablePixelBuffer::fillRect.
authorMichal Srb <michalsrb@gmail.com>
Fri, 13 Jan 2017 14:32:23 +0000 (16:32 +0200)
committerPierre Ossman <ossman@cendio.se>
Wed, 18 Jan 2017 12:37:34 +0000 (13:37 +0100)
commit6c39c0cb0191e1ca4fe209450bbe6297f047ce87
treed1b4499d2df252ca0f358395899c25e26e1da4e2tree | snapshot
parente25272fc74ef09987ccaa33b9bf1736397c76fdfcommit | diff
Fix buffer overflow in ModifiablePixelBuffer::fillRect.

It can be triggered by RRE message with subrectangle out of framebuffer
boundaries. It may prevent the same kind of issue caused by evil message
from another encoding too.

(cherry picked from commit 18c020124ff1b2441f714da2017f63dba50720ba)
common/rfb/PixelBuffer.cxx diff | blob | history
High performance, multi-platform VNC client and server: https://github.com/TigerVNC/tigervnc