Re: [PATCH] ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)

2023-07-12 Thread Michael Tokarev
04.07.2023 12:39, Mauro Matteo Cascella wrote: On Tue, Jul 4, 2023 at 11:03 AM Marc-André Lureau wrote: On Tue, Jul 4, 2023 at 10:42 AM Mauro Matteo Cascella wrote: A wrong exit condition may lead to an infinite loop when inflating a valid zlib buffer containing some extra bytes in the `

Re: [PATCH] ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)

2023-07-04 Thread Mauro Matteo Cascella
On Tue, Jul 4, 2023 at 11:03 AM Marc-André Lureau wrote: > > > > On Tue, Jul 4, 2023 at 10:42 AM Mauro Matteo Cascella > wrote: >> >> A wrong exit condition may lead to an infinite loop when inflating a >> valid zlib buffer containing some extra bytes in the `inflate_buffer` >> function. The bug

Re: [PATCH] ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)

2023-07-04 Thread Marc-André Lureau
On Tue, Jul 4, 2023 at 10:42 AM Mauro Matteo Cascella wrote: > A wrong exit condition may lead to an infinite loop when inflating a > valid zlib buffer containing some extra bytes in the `inflate_buffer` > function. The bug only occurs post-authentication. Return the buffer > immediately if the e

[PATCH] ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)

2023-07-04 Thread Mauro Matteo Cascella
A wrong exit condition may lead to an infinite loop when inflating a valid zlib buffer containing some extra bytes in the `inflate_buffer` function. The bug only occurs post-authentication. Return the buffer immediately if the end of the compressed data has been reached (Z_STREAM_END). Fixes: CVE-