• Show log

    Commit

  • Hash : fb835f9e
    Author : Sam Lantinga
    Date : 2017-08-14T20:22:19

    Fixed bug 2330 - Debian bug report: SDL2 X11 driver buffer overflow with large X11 file descriptor
    
    manuel.montezelo
    
    Original bug report (note that it was against 2.0.0, it might have been fixed in between):  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733015
    
    --------------------------------------------------------
    Package: libsdl2-2.0-0
    Version: 2.0.0+dfsg1-3
    Severity: normal
    Tags: patch
    
    I have occasional crashes here caused by the X11 backend of SDL2. It seems to
    be caused by the X11_Pending function trying to add a high number (> 1024)
    file descriptor to a fd_set before doing a select on it to avoid busy waiting
    on X11 events. This causes a buffer overflow because the file descriptor is
    larger (or equal) than the limit FD_SETSIZE.
    
    Attached is a possible workaround patch.
    
    Please also keep in mind that fd_set are also used in following files which
    may have similar problems.
    
    src/audio/bsd/SDL_bsdaudio.c
    src/audio/paudio/SDL_paudio.c
    src/audio/qsa/SDL_qsa_audio.c
    src/audio/sun/SDL_sunaudio.c
    src/joystick/linux/SDL_sysjoystick.c
    
    
    --------------------------------------------------------
    
    On Tuesday 24 December 2013 00:43:13 Sven Eckelmann wrote:
    > I have occasional crashes here caused by the X11 backend of SDL2. It seems
    > to be caused by the X11_Pending function trying to add a high number (>
    > 1024) file descriptor to a fd_set before doing a select on it to avoid busy
    > waiting on X11 events. This causes a buffer overflow because the file
    > descriptor is larger (or equal) than the limit FD_SETSIZE.
    
    
    I personally experienced this problem while hacking on the python bindings
    package for SDL2 [1] (while doing make runtest). But it easier to reproduce in
    a smaller, synthetic testcase.
    

  • Properties

  • Git HTTP https://git.kmx.io/kc3-lang/SDL.git
    Git SSH git@git.kmx.io:kc3-lang/SDL.git
    Public access ? public
    Description

    Fork of https://github.com/libsdl-org/SDL

    Users
    kc3_lang_org thodg_w www_kmx_io thodg_l thodg thodg_m
    Tags

  • README.txt

  •                          Simple DirectMedia Layer
    
                                      (SDL)
    
                                    Version 2.0
    
    ---
    https://www.libsdl.org/
    
    Simple DirectMedia Layer is a cross-platform development library designed
    to provide low level access to audio, keyboard, mouse, joystick, and graphics
    hardware via OpenGL and Direct3D. It is used by video playback software,
    emulators, and popular games including Valve's award winning catalog
    and many Humble Bundle games.
    
    More extensive documentation is available in the docs directory, starting
    with README.md
    
    Enjoy!
    	Sam Lantinga				(slouken@libsdl.org)