diff options
| author | Frediano Ziglio <fziglio@redhat.com> | 2015-09-08 13:09:35 +0100 |
|---|---|---|
| committer | Frediano Ziglio <fziglio@redhat.com> | 2015-10-06 11:11:10 +0100 |
| commit | 0f58e9da56e0cbbe4349eefcbb300b6f285e0423 (patch) | |
| tree | 424ef6ae5e0f1deba3fbb2023651bc708d480519 /client/glz_decoder_window.cpp | |
| parent | 68a742aaa8d692940ac15d021799b702412887e5 (diff) | |
Prevent 32 bit integer overflow in bitmap_consistent
The overflow may lead to buffer overflow as the row size computed from
width (bitmap->x) can be bigger than the size in bytes (bitmap->stride).
This can make spice-server accept the invalid sizes.
Signed-off-by: Frediano Ziglio <fziglio@redhat.com>
Acked-by: Christophe Fergeau <cfergeau@redhat.com>
Diffstat (limited to 'client/glz_decoder_window.cpp')
0 files changed, 0 insertions, 0 deletions