diff --git a/cve-2008-0006-server-fixup.patch b/cve-2008-0006-server-fixup.patch new file mode 100644 index 0000000..70f0cb8 --- /dev/null +++ b/cve-2008-0006-server-fixup.patch @@ -0,0 +1,17 @@ +diff -up xorg-x11-6.8.2/xc/programs/Xserver/dix/dixfonts.c.jx xorg-x11-6.8.2/xc/programs/Xserver/dix/dixfonts.c +--- xorg-x11-6.8.2/xc/programs/Xserver/dix/dixfonts.c.jx 2004-04-23 15:04:44.000000000 -0400 ++++ xorg-x11-server/dix/dixfonts.c 2008-01-14 11:15:00.000000000 -0500 +@@ -339,6 +339,13 @@ doOpenFont(ClientPtr client, OFclosurePt + err = BadFontName; + goto bail; + } ++ /* check values for firstCol, lastCol, firstRow, and lastRow */ ++ if (pfont->info.firstCol > pfont->info.lastCol || ++ pfont->info.firstRow > pfont->info.lastRow || ++ pfont->info.lastCol - pfont->info.firstCol > 255) { ++ err = AllocError; ++ goto bail; ++ } + if (!pfont->fpe) + pfont->fpe = fpe; + pfont->refcnt++;