Received: from localhost (localhost [127.0.0.1])
	by mail.netbsd.org (Postfix) with ESMTP id 966BA84DC2
	for <source-changes@NetBSD.org>; Tue, 20 Jun 2023 23:00:40 +0000 (UTC)
X-Virus-Scanned: amavisd-new at netbsd.org
Received: from mail.netbsd.org ([IPv6:::1])
	by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025)
	with ESMTP id Z7GZXoDbR86N for <source-changes@netbsd.org>;
	Tue, 20 Jun 2023 23:00:40 +0000 (UTC)
Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197])
	by mail.netbsd.org (Postfix) with ESMTP id 2DF0F84E61
	for <source-changes@NetBSD.org>; Tue, 20 Jun 2023 23:00:40 +0000 (UTC)
Received: by cvs.NetBSD.org (Postfix, from userid 500)
	id 92F02FA89; Tue, 20 Jun 2023 23:00:39 +0000 (UTC)
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
MIME-Version: 1.0
Date: Tue, 20 Jun 2023 23:00:39 +0000
From: "Soren Jacobsen" <snj@netbsd.org>
Subject: CVS commit: [netbsd-8] xsrc/external/mit/libX11/dist/src
To: source-changes@NetBSD.org
Approved: for-source-only
Reply-To: snj@netbsd.org
X-Mailer: log_accum
Message-Id: <20230620230039.92F02FA89@cvs.NetBSD.org>

Module Name:	xsrc
Committed By:	snj
Date:		Tue Jun 20 23:00:39 UTC 2023

Modified Files:
	xsrc/external/mit/libX11/dist/src [netbsd-8]: InitExt.c

Log Message:
Apply patch (requested by mrg in ticket #1826):
InitExt.c: Add bounds checks for extension request, event, & error codes

Fixes CVE-2023-3138: X servers could return values from XQueryExtension
that would cause Xlib to write entries out-of-bounds of the arrays to
store them, though this would only overwrite other parts of the Display
struct, not outside the bounds allocated for that structure.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.7 -r1.1.1.7.2.1 \
    xsrc/external/mit/libX11/dist/src/InitExt.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.