File x11vnc-fix-buffer-overflow-in-snapshot_stack_list.patch of Package x11vnc
From c79be20b5a150ae4888a5e4a21145646360b1cdd Mon Sep 17 00:00:00 2001
From: Michal Srb <michalsrb@gmail.com>
Date: Mon, 4 Jul 2016 16:45:01 +0300
Subject: [PATCH] Fix buffer overflow in snapshot_stack_list.
diff --git a/src/win_utils.c b/src/win_utils.c
index 45f70d4..2b9803f 100644
--- a/x11vnc/win_utils.c
+++ b/x11vnc/win_utils.c
@@ -248,8 +248,8 @@ void snapshot_stack_list(int free_only, double allowed_age) {
}
last_snap = now;
- if (num > stack_list_len + blackouts) {
- int n = 2*num;
+ if (num + blackouts > stack_list_len) {
+ int n = 2 * (num + blackouts);
free(stack_list);
stack_list = (winattr_t *) malloc(n*sizeof(winattr_t));
stack_list_len = n;