Re: CAN-2005-2495

On Wed, 14 Sep 2005, Matthias Scheler wrote:

> is there an XFree86 patch for CAN-2005-2495? The X.org patch from
> https://bugs.freedesktop.org/attachment.cgi?id=3072 applies (except
> of the non-existing file "programs/Xserver/hw/xfree86/exa/exa.c")
> but I would like to avoid merge pains after the next XFree86 release.

> URLs:
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2495
> http://secunia.com/advisories/16777/
> https://bugs.freedesktop.org/show_bug.cgi?id=594

Yes.  I committed something for this, this morning, to our HEAD branch.  I'm 
in the process of going through all builds I can do, before committing it to 
the 4.5 branch (and possibly previous branches).

The patch the advisory suggests is not correct, for a number of reasons, 
which is one reason why I'm going through the above process.

Please bear with me.

Marc.

+----------------------------------+-----------------------------------+
|  Marc Aurele La France           |  work:   1-780-492-9310           |
|  Academic Information and        |  fax:    1-780-492-1729           |
|    Communications Technologies   |  email:  [email protected]          |
|  352 General Services Building   +-----------------------------------+
|  University of Alberta           |                                   |
|  Edmonton, Alberta               |     Standard disclaimers apply    |
|  T6G 2H1                         |                                   |
|  CANADA                          |                                   |
+----------------------------------+-----------------------------------+
XFree86 developer and VP.  ATI driver and X server internals.