History log of /xsrc/external/mit/libXfont/dist/src/bitmap/
Revision Date Author Comments
(<<< Hide modified files)
(Show modified files >>>)
f262af57 29-Nov-2017 mrg <mrg@NetBSD.org>

merge libXcursor 1.1.15, libXfont 1.5.4 and libXfont2 2.0.3.

a97c3f35 29-Nov-2017 mrg <mrg@NetBSD.org>

initial import of libXfont-1.5.4. this fixes CVE-2017-16611.

b0d196e1 05-Mar-2017 mrg <mrg@NetBSD.org>

merge libXfont 1.5.2.

b43acbb4 05-Mar-2017 mrg <mrg@NetBSD.org>

initial import of libXfont-1.5.2

0d7c9fdb 17-Mar-2015 mrg <mrg@NetBSD.org>

merge Xfont 1.5.1.

121a5469 17-Mar-2015 mrg <mrg@NetBSD.org>

initial import of libXfont-1.5.1

0145ab54 25-Feb-2015 snj <snj@NetBSD.org>

initial import of libXfont-1.5.0

b020570b 16-Mar-2014 mrg <mrg@NetBSD.org>

initial import of libXfont-1.4.7

bafde43d 07-Jan-2014 wiz <wiz@NetBSD.org>

Additional hardening from upstream:

From f8b21df399fbedd08da88752181b8a290a38d890 Mon Sep 17 00:00:00 2001
From: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Mon, 23 Dec 2013 19:01:11 -0800
Subject: [PATCH:libXfont 2/2] Limit additional sscanf strings to fit buffer
sizes

None of these could currently result in buffer overflow, as the input
and output buffers were the same size, but adding limits helps ensure
we keep it that way, if we ever resize any of these in the future.

Fixes cppcheck warnings:
[lib/libXfont/src/bitmap/bdfread.c:547]: (warning)
scanf without field width limits can crash with huge input data.
[lib/libXfont/src/bitmap/bdfread.c:553]: (warning)
scanf without field width limits can crash with huge input data.
[lib/libXfont/src/bitmap/bdfread.c:636]: (warning)
scanf without field width limits can crash with huge input data.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
---
src/bitmap/bdfread.c | 14 +++++++++++---
1 file changed, 11 insertions(+), 3 deletions(-)

96317916 07-Jan-2014 wiz <wiz@NetBSD.org>

CVS-2013-6462:
From aeabb3efa6905e11c479e2e5319f2b6b3ab22009 Mon Sep 17 00:00:00 2001
From: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Mon, 23 Dec 2013 18:34:02 -0800
Subject: [PATCH:libXfont 1/2] CVE-2013-XXXX: unlimited sscanf can overflow
stack buffer in bdfReadCharacters()

Fixes cppcheck warning:
[lib/libXfont/src/bitmap/bdfread.c:341]: (warning)
scanf without field width limits can crash with huge input data.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
---
src/bitmap/bdfread.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

1a17810d 31-May-2013 mrg <mrg@NetBSD.org>

merge libXfont 1.4.5

41c30155 31-May-2013 mrg <mrg@NetBSD.org>

initial import of libXfont-1.4.5

4b1cd807 19-May-2012 cheusov <cheusov@NetBSD.org>

fix in libxfont:
An uninitialized pointer causes a crash if pcf header is corrupted
(upstream patch).

5a3d36df 14-Aug-2010 mrg <mrg@NetBSD.org>

initial import of libXfont-1.4.2

b3062210 09-Nov-2009 mrg <mrg@NetBSD.org>

initial import of libXfont-1.4.1

7f7f5e4e 10-Jun-2009 mrg <mrg@NetBSD.org>

initial import of libXfont-1.4.0

23a0898a 30-Jul-2008 mrg <mrg@NetBSD.org>

initial import of libXfont-1.3.2