Alan Coopersmith
73c63afb93
Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]
...
Multiple functions in the Xinput extension handling of requests from
clients failed to check that the length of the request sent by the
client was large enough to perform all the required operations and
thus could read or write to memory outside the bounds of the request
buffer.
This commit includes the creation of a new REQUEST_AT_LEAST_EXTRA_SIZE
macro in include/dix.h for the common case of needing to ensure a
request is large enough to include both the request itself and a
minimum amount of extra data following the request header.
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
2014-12-08 18:09:48 -08:00
..
.gitignore
busfault.h
Trap SIGBUS to handle truncated shared memory segments
2013-11-11 15:16:07 -08:00
callback.h
Avoid starting a comment with */*
2014-07-17 10:19:52 -07:00
client.h
closestr.h
Replace 'pointer' type with 'void *'
2014-01-12 10:24:11 -08:00
closure.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
colormap.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
colormapst.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
cursor.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
cursorstr.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
dbus-core.h
xfree86: drop double-typedef of DBusConnection
2014-11-12 10:25:00 +10:00
dix-config-apple-verbatim.h
dix-config.h.in
Use unique display name for each xi2 test program [v3]
2014-10-09 14:15:45 +02:00
dix.h
Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]
2014-12-08 18:09:48 -08:00
dixaccess.h
dixevents.h
dixfont.h
Avoid starting a comment with */*
2014-07-17 10:19:52 -07:00
dixfontstr.h
dixfontstubs.h
include: GetClientResolutions is declared in font.h
2014-01-22 19:56:31 -08:00
dixgrabs.h
Avoid starting a comment with */*
2014-07-17 10:19:52 -07:00
dixstruct.h
dix: Praise clients which haven't run for a while, rather than idle clients
2014-01-23 10:10:28 -08:00
eventconvert.h
events.h
eventstr.h
Delete stray ; in struct _DeviceChangedEvent
2014-02-09 17:21:20 -08:00
exevents.h
extension.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
extinit.h
present: Add Present extension
2013-10-31 16:59:18 -07:00
extnsionst.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
gc.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
gcstruct.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
globals.h
Clean up warnings in DIX
2014-01-12 10:14:49 -08:00
glx_extinit.h
hotplug.h
config: Replace OdevAttributes linked list with struct
2014-07-17 17:10:48 -07:00
input.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
inputstr.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
inpututils.h
kdrive-config.h.in
list.h
include: fix documentation for list.h
2014-11-12 10:24:55 +10:00
Makefile.am
systemd-logind: Add systemd-logind "core"
2014-03-03 08:13:55 +01:00
misc.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
miscstruct.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
opaque.h
Add a command line argument for disabling indirect GLX.
2014-04-23 13:24:22 -07:00
optionstr.h
os.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
pixmap.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
pixmapstr.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
privates.h
Replace 'pointer' type with 'void *'
2014-01-12 10:24:11 -08:00
property.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
propertyst.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
protocol-versions.h
present: Don't use the major/minor version from the protocol headers
2013-12-13 14:59:04 -05:00
ptrveloc.h
region.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
regionstr.h
dix: integer overflow in RegionSizeof() [CVE-2014-8092 3/4]
2014-12-08 18:09:47 -08:00
registry.h
XSERVER_DTRACE needs request names from registry too
2014-09-22 12:00:46 -07:00
resource.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
rgb.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
screenint.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
scrnintstr.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
selection.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
servermd.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
site.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
swaprep.h
swapreq.h
systemd-logind.h
systemd-logind: let the logind code decided whether to close an fd
2014-05-05 07:26:33 +10:00
validate.h
version-config.h.in
window.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
windowstr.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
XIstubs.h
xkb-config.h.in
xkbfile.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
xkbrules.h
xkb: add a call to init an XkbRMLVOSet from const chars
2014-02-04 10:53:59 +10:00
xkbsrv.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
xkbstr.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
xorg-config.h.in
xfree86: Remove the memory of MTRR awareness
2014-09-16 11:58:53 -04:00
xorg-server.h.in
Add X_BYTE_ORDER to xorg-server.h
2014-07-31 21:42:04 -07:00
Xprintf.h
xserver-properties.h
xsha1.h
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
xwin-config.h.in
configure: Restore DEFAULT_LOGDIR to xwin-config.h, it is used
2014-06-02 13:07:46 +01:00