openkylin
/
qemu
mirror of https://gitee.com/openkylin/qemu.git
9
0
Fork 0
Code Issues Projects Releases Wiki Activity
qemu/ui
History
Mauro Matteo Cascella e305c0cae8 ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) 
A wrong exit condition may lead to an infinite loop when inflating a
valid zlib buffer containing some extra bytes in the `inflate_buffer`
function. The bug only occurs post-authentication. Return the buffer
immediately if the end of the compressed data has been reached
(Z_STREAM_END).

Fixes: CVE-2023-3255
Fixes: 0bf41cab ("ui/vnc: clipboard support")
Reported-by: Kevin Denis <kevin.denis@synacktiv.com>
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Tested-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-ID: <20230704084210.101822-1-mcascell@redhat.com>
 		2024-07-30 14:35:24 +08:00
..
icons New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
keycodemapdb New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
shader New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
clipboard.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
cocoa.m New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
console-gl.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
console.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
curses.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
curses_keys.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
cursor.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
cursor_hidden.xpm New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
cursor_left_ptr.xpm New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus-chardev.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus-clipboard.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus-console.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus-display1.xml New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus-error.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus-listener.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus-module.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
dbus.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
egl-context.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
egl-headless.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
egl-helpers.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
gtk-clipboard.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
gtk-egl.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
gtk-gl-area.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
gtk.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
input-barrier.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
input-barrier.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
input-keymap.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
input-legacy.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
input-linux.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
input.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
kbd-state.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
keymaps.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
keymaps.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
meson.build New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
qemu-pixman.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
qemu-x509.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
qemu.desktop New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sdl2-2d.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sdl2-gl.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sdl2-input.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sdl2.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
shader.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
spice-app.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
spice-core.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
spice-display.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
spice-input.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
spice-module.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
trace-events New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
trace.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
udmabuf.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
util.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vdagent.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vgafont.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-auth-sasl.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-auth-sasl.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-auth-vencrypt.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-auth-vencrypt.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-clipboard.c ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) 2024-07-30 14:35:24 +08:00
vnc-enc-hextile-template.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-hextile.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-tight.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-tight.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-zlib.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-zrle.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-zrle.c.inc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-zrle.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-zywrle-template.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-enc-zywrle.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-jobs.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-jobs.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-palette.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-palette.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-stubs.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-ws.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc-ws.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vnc_keysym.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
win32-kbd-hook.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
x_keymap.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
x_keymap.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00