Skip to content

fix for ZDI-11426

Matthieu Herrb requested to merge mherrb/xserver:master into master

Avoid leaking un-initalized memory to clients by zeroing the whole pixmap on initial allocation.

This vulnerability was discovered by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative

Signed-off-by: Matthieu Herrb matthieu@herrb.eu Reviewed-by: Alan Coopersmith alan.coopersmith@oracle.com

Merge request reports