CVS commit: xsrc/xfree/xc/lib/font/bitmap

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    xsrc
Committed By:   wiz
Date:           Tue Jan  7 07:43:16 UTC 2014

Modified Files:
        xsrc/xfree/xc/lib/font/bitmap: bdfread.c

Log Message:
CVE-2013-6462:
>From aeabb3efa6905e11c479e2e5319f2b6b3ab22009 Mon Sep 17 00:00:00 2001
From: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
Date: Mon, 23 Dec 2013 18:34:02 -0800
Subject: [PATCH:libXfont 1/2] CVE-2013-XXXX: unlimited sscanf can overflow
 stack buffer in bdfReadCharacters()

Fixes cppcheck warning:
 [lib/libXfont/src/bitmap/bdfread.c:341]: (warning)
  scanf without field width limits can crash with huge input data.

Signed-off-by: Alan Coopersmith <alan.coopersmith%oracle.com@localhost>
Reviewed-by: Matthieu Herrb <matthieu%herrb.eu@localhost>
Reviewed-by: Jeremy Huddleston Sequoia <jeremyhu%apple.com@localhost>
---
 src/bitmap/bdfread.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 xsrc/xfree/xc/lib/font/bitmap/bdfread.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.