ubuntu-x-swat team mailing list archive

[Launchpad Bug Tracker <770522@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package libxi - 2:1.4.1-1ubuntu3

---------------
libxi (2:1.4.1-1ubuntu3) oneiric; urgency=low

  * Add 100_len_raw_events.patch: Cherrypick upstream patch to correct the
    use of the calculated structure length for memory allocations.  Fixes
    issue where incorrect memory size was allocated, leading to valuator
    data overwriting memory, resulting in an error "Invalid write of size
    1" and heap corruption causing applications to crash when they use Raw
    Events.  (LP: #770522)
 -- Bryce Harrington <bryce@xxxxxxxxxx>   Thu, 05 May 2011 14:11:39 -0700

** Changed in: libxi (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to libxi in Ubuntu.
https://bugs.launchpad.net/bugs/770522

Title:
  copyRawEvent() copies data outside of allocated space causing heap
  corruption