libX11: Changes to 'master'
Alan Coopersmith
alanc at kemper.freedesktop.org
Fri Jun 11 11:08:01 PDT 2010
src/xcms/LRGB.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit 47b04195d8a31c8f9e6dd804196162c6cfca3ac6
Author: Alan Coopersmith <alan.coopersmith at oracle.com>
Date: Fri Jun 4 13:20:17 2010 -0700
LINEAR_RGB_InitSCCData: When malloc fails, don't try to free unallocated bits
One of the malloc failure checks had a goto to the wrong spot in the
list of cleanup free() calls to unwind at the end, and was freeing
bits that hadn't been initialized/allocated yet, since they would be
stored in the struct that just failed to be allocated.
Error: Null pointer dereference (CWE 476)
Read from pointer that could be constant 'NULL'
at line 805 of /export/alanc/X.Org/sx86/lib/libX11/src/xcms/LRGB.c in function 'LINEAR_RGB_InitSCCData'.
Pointer checked against constant 'NULL' at line 754 but does not protect the dereference.
[ This bug was found by the Parfait bug checking tool.
For more information see http://research.sun.com/projects/parfait ]
Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>
More information about the xorg-commit
mailing list