[Pixman] [patch] fd.o bz# Bug 67484 - Corrupted CustomShape crashes Xorg

[Ritesh Khadgaray]

Hi

  If t->bottom is close to MIN_INT (probably invalid value),
subtracting top can lead to underflow and crashes X.  Attached patch
will fix the issue[1].   To test this, open the attached document[2].
This has alos been posted to xorg list[3].


[1] https://bugs.freedesktop.org/show_bug.cgi?id=67484
[2] https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921
[3] http://lists.x.org/archives/xorg-devel/2013-October/037996.html


Cheers
ritz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: validate.patch
Type: application/octet-stream
Size: 660 bytes
Desc: not available
URL: <http://lists.freedesktop.org/archives/pixman/attachments/20131014/867da12a/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: plantage-mai-only-empty.ods
Type: application/vnd.oasis.opendocument.spreadsheet
Size: 9308 bytes
Desc: not available
URL: <http://lists.freedesktop.org/archives/pixman/attachments/20131014/867da12a/attachment.ods>