Re: WMF SETABORTPROC issue - does it affect WineX?

The patch you provided disables use of SetAbortProc for all GDI usage, 
not just for WMFs.

The MS and WineHQ fix for the problem involved changing the WMF parser 
to not allow SetAbortProc commands to be passed on.  Cedega does not 
require a patch like this, as it currently doesn't process any escape 
messages through the WMF parser.

Take care,
 -Gav

Bryan Kadzban wrote:

>As I understand it, the attached patch is basically how Microsoft fixed
>the recent WMF issue (MS06-001) [1].  It doesn't appear to be fixed in
>WineX CVS, although some distros have updated Wine to fix a similar
>issue [2].
>
>I assume WineX is vulnerable to something similar, since the Escape()
>handler in graphics/escape.c does in fact call SetAbortProc() when it
>sees a SETABORTPROC escape.  Should the attached patch be applied?
>
>[1] http://isc.sans.org/diary.php?storyid=1020
>[2] http://secunia.com/advisories/18323/
>  
>


-- 
Gavriel State
Founder & CTO
TransGaming Technologies Inc.
[email protected]
http://www.transgaming.com

Let the games begin!