Displaying 1 result from an estimated 1 matches for "xfreefontpath".
Did you mean:
freefontpath
2018 Aug 21
0
X.Org security advisory: August 21, 2018
...valid reply (CVE-2018-14598).
----------------------------------------
If the server sends a reply in which even the first string would
overflow the transmitted bytes, list[0] (or flist[0]) will be set to
NULL and a count of 0 is returned.
If the resulting list is freed with XFreeExtensionList or
XFreeFontPath later on, the first Xfree call:
Xfree (list[0]-1)
turns into
Xfree (NULL-1)
which will most likely trigger a segmentation fault.
Patches
=======
Patches for these issues have been commited to the libX11 git repository.
libX11 1.6.6 will be released shortly and will include those patche...