diff options
author | Adam Jackson <ajax@redhat.com> | 2009-04-14 10:54:25 -0400 |
---|---|---|
committer | Adam Jackson <ajax@redhat.com> | 2009-04-14 10:57:19 -0400 |
commit | 0eb19f9437b7d8c19592e49eedb028771d300d80 (patch) | |
tree | b2ff0b2de883e509c05fba8b34b5ac2bf7ad6626 /os/xdmcp.c | |
parent | f0543ae4ec0fcb5d696e7b2983653bd779f1eddc (diff) |
xdmcp: Don't crash on X -query with more than 255 IP addresses. (#20675)
You could be more clever than this, but the wire protocol says this
really is an array of not more than 255 ARRAY8, so it's not just a
matter of changing the types.
Diffstat (limited to 'os/xdmcp.c')
-rw-r--r-- | os/xdmcp.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/os/xdmcp.c b/os/xdmcp.c index cf9558679..c1d650d46 100644 --- a/os/xdmcp.c +++ b/os/xdmcp.c @@ -490,6 +490,8 @@ XdmcpRegisterConnection ( return; } } + if (ConnectionAddresses.length + 1 == 256) + return; newAddress = xalloc (addrlen * sizeof (CARD8)); if (!newAddress) return; |