Fixed Out-of-bound read in glyph_cache_put
CVE-2020-11098 thanks to @antonio-morales for finding this.
This commit is contained in:
parent
6ade7b4cbf
commit
c0fd449ec0
2
libfreerdp/cache/glyph.c
vendored
2
libfreerdp/cache/glyph.c
vendored
@ -579,7 +579,7 @@ BOOL glyph_cache_put(rdpGlyphCache* glyphCache, UINT32 id, UINT32 index, rdpGlyp
|
||||
return FALSE;
|
||||
}
|
||||
|
||||
if (index > glyphCache->glyphCache[id].number)
|
||||
if (index >= glyphCache->glyphCache[id].number)
|
||||
{
|
||||
WLog_ERR(TAG, "invalid glyph cache index: %" PRIu32 " in cache id: %" PRIu32 "", index, id);
|
||||
return FALSE;
|
||||
|
Loading…
Reference in New Issue
Block a user