Sophie

Sophie

distrib > * > 2008.0 > x86_64 > by-pkgid > 7b28d105797d7a6dbf17d30e8a014895 > files > 7

x11-server-xgl-0.0.1-0.20070917.2.3mdv2008.0.src.rpm

diff --git a/render/render.c b/render/render.c
index caaa278..b53e878 100644
--- a/render/render.c
+++ b/render/render.c
@@ -1504,6 +1504,8 @@ ProcRenderCreateCursor (ClientPtr client)
     pScreen = pSrc->pDrawable->pScreen;
     width = pSrc->pDrawable->width;
     height = pSrc->pDrawable->height;
+    if (height && width > UINT32_MAX/(height*sizeof(CARD32)))
+	return BadAlloc;
     if ( stuff->x > width 
       || stuff->y > height )
 	return (BadMatch);