oss-sec mailing list archives

[Pixman] create_bits(): Cast the result of height * stride to size_t


From: Gustavo Grieco <gustavo.grieco () gmail com>
Date: Wed, 24 Feb 2016 09:10:37 -0300

 Hi,

There is an (old) integer overflow in create_bits in the pixman library.
Patch and details are available here:

https://web.archive.org/web/20141227044037/http://lists.freedesktop.org/archives/pixman/2014-April/003244.html

Please, assign a CVE to this issue.

Regards,
Gustavo.

Current thread: