Bug 107023 - [PATCH] xcursorgen: Fix null pointer dereference on very large images.
Summary: [PATCH] xcursorgen: Fix null pointer dereference on very large images.
Status: RESOLVED MOVED
Alias: None
Product: xorg
Classification: Unclassified
Component: App/other (show other bugs)
Version: git
Hardware: Other All
: medium normal
Assignee: Xorg Project Team
QA Contact: Xorg Project Team
URL:
Whiteboard:
Keywords: patch
Depends on:
Blocks:
 
Reported: 2018-06-25 07:09 UTC by Tobias Stoeckmann
Modified: 2018-08-10 21:36 UTC (History)
0 users

See Also:
i915 platform:
i915 features:

Attachments
Patch to fix the issue (1.10 KB, patch)
2018-06-25 07:09 UTC, Tobias Stoeckmann 		no flags Details | Splinter Review
View All

Description Tobias Stoeckmann 2018-06-25 07:09:39 UTC 
Created attachment 140313 [details] [review]
Patch to fix the issue

If xcursorgen encounters a PNG file which is larger than 32767 pixels
in width or height, a null pointer dereference occurs because the
return value of XcursorImageCreate is not checked.

The largest possible value is 32767 for libXcursor, which is a hard
coded limit due to a 16 bit integer used (0x7FFF).
Comment 1 GitLab Migration User 2018-08-10 21:36:22 UTC 
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/xorg/app/xcursorgen/issues/1.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.