Please review - security patch CVE-2015-1474

Moritz Bandemer replicant at
Mon Mar 30 15:55:09 UTC 2015

I've merged the patch from here: 
to the Replicant sources and successfully recompiled Replicant after 
that for my device.

After flashing the patched Replicant, I've tested my productive device 
several weeks without any misbehavior.
And of course I have successfully checked, that Replicant isn't 
vulnerale to the "GraphicBuffer overflow vulnerability - CVE-2015-1474" 

Ticket reference (Bug #1251):
Please review the patch attached and apply it, if you like.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CVE-2015-1474.patch
Type: text/x-diff
Size: 2059 bytes
Desc: not available
URL: <>

More information about the Replicant mailing list