[xsrc/netbsd-9]: xsrc/external/mit/xorg-server/dist/Xi Apply patch, requested...

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/xsrc/rev/07fb2e22b8d4
branches:  netbsd-9
changeset: 10709:07fb2e22b8d4
user:      martin <martin%NetBSD.org@localhost>
date:      Tue Apr 27 10:37:01 2021 +0000

description:
Apply patch, requested by mrg in ticket #1257:

        external/mit/xorg-server/dist/Xi/chgfctl.c      (apply patch)

Fix for CVE-2021-3472 (local privilege escalation).

diffstat:

 external/mit/xorg-server/dist/Xi/chgfctl.c |  5 ++++-
 1 files changed, 4 insertions(+), 1 deletions(-)

diffs (16 lines):

diff -r 5e79ed5eaea2 -r 07fb2e22b8d4 external/mit/xorg-server/dist/Xi/chgfctl.c
--- a/external/mit/xorg-server/dist/Xi/chgfctl.c        Wed Feb 17 09:44:58 2021 +0000
+++ b/external/mit/xorg-server/dist/Xi/chgfctl.c        Tue Apr 27 10:37:01 2021 +0000
@@ -464,8 +464,11 @@
         break;
     case StringFeedbackClass:
     {
-        xStringFeedbackCtl *f = ((xStringFeedbackCtl *) &stuff[1]);
+        xStringFeedbackCtl *f;
 
+        REQUEST_AT_LEAST_EXTRA_SIZE(xChangeFeedbackControlReq,
+                                    sizeof(xStringFeedbackCtl));
+        f = ((xStringFeedbackCtl *) &stuff[1]);
         if (client->swapped) {
             if (len < bytes_to_int32(sizeof(xStringFeedbackCtl)))
                 return BadLength;