tag name | POST_SWITCH_TO_GOBJECT_BRANCH (118e4f6c2dc3cf5c25c07bf71ede50ef8f6d1db9) |
tag date | 2007-10-15 14:20:43 +0000 |
tagged by | William Jon McCann <mccann@src.gnome.org> |
tagged object | commit f0491fe99e... |
download | gdm-POST_SWITCH_TO_GOBJECT_BRANCH.tar.gz |
---|
2007-10-15 William Jon McCann <mccann@jhu.edu>
* common/gdm-address.c: (gdm_address_new_from_sockaddr),
(gdm_address_peek_local_list):
* common/gdm-address.h:
* daemon/gdm-xdmcp-display-factory.c: (do_bind),
(create_address_from_request), (decode_packet):
* gui/simple-chooser/gdm-host-chooser-widget.c: (decode_packet),
(find_broadcast_addresses), (add_hosts):
The function gdm_address_new_from_sockaddr_storage gets called in a
few places with socket addresses that aren't necessary
sockaddr_storage bytes big (all the places that call getaddrinfo).
This results in the memdup call in that function potentially copying
out of bounds bytes.
Patch from: Ray Strode <halfline@gmail.com>
svn path=/branches/mccann-gobject/; revision=5360