Re: [PATCH wayland 2/2] connection: fix demarshal of invalid header

On Tue, 12 Mar 2019 23:11:03 + Simon Ser wrote: > Hi, > > On Wednesday, March 6, 2019 12:58 PM, Pekka Paalanen > wrote: > > From: Pekka Paalanen pekka.paala...@collabora.com > > > > The size argument to wl_connection_demarshal() is taken from the message by > > the > > caller wl_client_co

Re: [PATCH wayland 2/2] connection: fix demarshal of invalid header

Hi, On Wednesday, March 6, 2019 12:58 PM, Pekka Paalanen wrote: > From: Pekka Paalanen pekka.paala...@collabora.com > > The size argument to wl_connection_demarshal() is taken from the message by > the > caller wl_client_connection_data(), therefore 'size' is untrusted data > controllable by a

[PATCH wayland 2/2] connection: fix demarshal of invalid header

From: Pekka Paalanen The size argument to wl_connection_demarshal() is taken from the message by the caller wl_client_connection_data(), therefore 'size' is untrusted data controllable by a Wayland client. The size should always be at least the header size, otherwise the header is invalid. If th