From ed55438366e93d70867e3ba6b80978673e536fc0 Mon Sep 17 00:00:00 2001 From: Tobias Stoeckmann Date: Sun, 2 May 2021 21:35:23 +0200 Subject: [PATCH] cursor: fix CVE-2013-2003 The libXcursor fix for CVE-2013-2003 has never been imported into wayland, leaving it vulnerable to it. Changing the argument type to an unsigned type is an effective merge of Ilja Van Sprundel's commit in libXcursor. Signed-off-by: Tobias Stoeckmann --- cursor/xcursor.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cursor/xcursor.c b/cursor/xcursor.c index 3b35f1c..0506680 100644 --- a/cursor/xcursor.c +++ b/cursor/xcursor.c @@ -300,7 +300,7 @@ _XcursorFileHeaderDestroy (XcursorFileHeader *fileHeader) } static XcursorFileHeader * -_XcursorFileHeaderCreate (int ntoc) +_XcursorFileHeaderCreate (XcursorUInt ntoc) { XcursorFileHeader *fileHeader;