| f262af57 |
29-Nov-2017 |
mrg <mrg@NetBSD.org> |
merge libXcursor 1.1.15, libXfont 1.5.4 and libXfont2 2.0.3. |
| a97c3f35 |
29-Nov-2017 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.5.4. this fixes CVE-2017-16611. |
| b0d196e1 |
05-Mar-2017 |
mrg <mrg@NetBSD.org> |
merge libXfont 1.5.2. |
| b43acbb4 |
05-Mar-2017 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.5.2 |
| 0d7c9fdb |
17-Mar-2015 |
mrg <mrg@NetBSD.org> |
merge Xfont 1.5.1. |
| 121a5469 |
17-Mar-2015 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.5.1 |
| 0145ab54 |
25-Feb-2015 |
snj <snj@NetBSD.org> |
initial import of libXfont-1.5.0 |
| b020570b |
16-Mar-2014 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.4.7 |
| bafde43d |
07-Jan-2014 |
wiz <wiz@NetBSD.org> |
Additional hardening from upstream: From f8b21df399fbedd08da88752181b8a290a38d890 Mon Sep 17 00:00:00 2001 From: Alan Coopersmith <alan.coopersmith@oracle.com> Date: Mon, 23 Dec 2013 19:01:11 -0800 Subject: [PATCH:libXfont 2/2] Limit additional sscanf strings to fit buffer sizes None of these could currently result in buffer overflow, as the input and output buffers were the same size, but adding limits helps ensure we keep it that way, if we ever resize any of these in the future. Fixes cppcheck warnings: [lib/libXfont/src/bitmap/bdfread.c:547]: (warning) scanf without field width limits can crash with huge input data. [lib/libXfont/src/bitmap/bdfread.c:553]: (warning) scanf without field width limits can crash with huge input data. [lib/libXfont/src/bitmap/bdfread.c:636]: (warning) scanf without field width limits can crash with huge input data. Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> Reviewed-by: Matthieu Herrb <matthieu@herrb.eu> Reviewed-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com> --- src/bitmap/bdfread.c | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) |
| 96317916 |
07-Jan-2014 |
wiz <wiz@NetBSD.org> |
CVS-2013-6462: From aeabb3efa6905e11c479e2e5319f2b6b3ab22009 Mon Sep 17 00:00:00 2001 From: Alan Coopersmith <alan.coopersmith@oracle.com> Date: Mon, 23 Dec 2013 18:34:02 -0800 Subject: [PATCH:libXfont 1/2] CVE-2013-XXXX: unlimited sscanf can overflow stack buffer in bdfReadCharacters() Fixes cppcheck warning: [lib/libXfont/src/bitmap/bdfread.c:341]: (warning) scanf without field width limits can crash with huge input data. Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> Reviewed-by: Matthieu Herrb <matthieu@herrb.eu> Reviewed-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com> --- src/bitmap/bdfread.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) |
| 1a17810d |
31-May-2013 |
mrg <mrg@NetBSD.org> |
merge libXfont 1.4.5 |
| 41c30155 |
31-May-2013 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.4.5 |
| 4b1cd807 |
19-May-2012 |
cheusov <cheusov@NetBSD.org> |
fix in libxfont: An uninitialized pointer causes a crash if pcf header is corrupted (upstream patch). |
| 5a3d36df |
14-Aug-2010 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.4.2 |
| b3062210 |
09-Nov-2009 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.4.1 |
| 7f7f5e4e |
10-Jun-2009 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.4.0 |
| 23a0898a |
30-Jul-2008 |
mrg <mrg@NetBSD.org> |
initial import of libXfont-1.3.2 |