randr: avoid integer truncation in length check of ProcRRChange*Property

CVE-2023-6478
This commit is contained in:
matthieu
2023-12-13 06:21:57 +00:00
parent 1df2839930
commit 679d2a4fc6
2 changed files with 2 additions and 2 deletions

View File

@@ -530,7 +530,7 @@ ProcRRChangeOutputProperty(ClientPtr client)
char format, mode;
unsigned long len;
int sizeInBytes;
int totalSize;
uint64_t totalSize;
int err;
REQUEST_AT_LEAST_SIZE(xRRChangeOutputPropertyReq);

View File

@@ -498,7 +498,7 @@ ProcRRChangeProviderProperty(ClientPtr client)
char format, mode;
unsigned long len;
int sizeInBytes;
int totalSize;
uint64_t totalSize;
int err;
REQUEST_AT_LEAST_SIZE(xRRChangeProviderPropertyReq);