Pierre Ossman
1d5aaf54f8
Add sanity checks for PixelFormat shift values
...
Otherwise we might be tricked in to reading and writing things at
incorrect offsets for pixels which ultimately could result in an
attacker writing things to the stack or heap and executing things
they shouldn't.
This only affects the server as the client never uses the pixel
format suggested by th server.
Issue found by Pavel Cheremushkin from Kaspersky Lab.
2020-09-21 12:47:56 +03:00
..
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-21 12:45:51 +03:00
2020-09-21 12:45:51 +03:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-21 12:47:56 +03:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-21 12:46:27 +03:00
2020-09-21 12:40:12 +03:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-21 12:40:12 +03:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00
2020-09-20 12:16:44 +00:00