Alan Coopersmith
73c63afb93
Xi: unvalidated lengths in Xinput extension [CVE-2014-8095] ...
Multiple functions in the Xinput extension handling of requests from
clients failed to check that the length of the request sent by the
client was large enough to perform all the required operations and
thus could read or write to memory outside the bounds of the request
buffer.
This commit includes the creation of a new REQUEST_AT_LEAST_EXTRA_SIZE
macro in include/dix.h for the common case of needing to ensure a
request is large enough to include both the request itself and a
minimum amount of extra data following the request header.
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
2014-12-08 18:09:48 -08:00
.gitignore: use common defaults with custom section #24239
2009-11-11 21:40:20 -08:00
Trap SIGBUS to handle truncated shared memory segments
2013-11-11 15:16:07 -08:00
Avoid starting a comment with */*
2014-07-17 10:19:52 -07:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
Replace 'pointer' type with 'void *'
2014-01-12 10:24:11 -08:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
xfree86: drop double-typedef of DBusConnection
2014-11-12 10:25:00 +10:00
Use unique display name for each xi2 test program [v3]
2014-10-09 14:15:45 +02:00
Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]
2014-12-08 18:09:48 -08:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
dix: Remove redundant declarations.
2012-05-14 13:31:00 +01:00
Avoid starting a comment with */*
2014-07-17 10:19:52 -07:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
include: GetClientResolutions is declared in font.h
2014-01-22 19:56:31 -08:00
Avoid starting a comment with */*
2014-07-17 10:19:52 -07:00
dix: Praise clients which haven't run for a while, rather than idle clients
2014-01-23 10:10:28 -08:00
input: drop FP1616 macro
2012-11-19 12:12:23 +10:00
Add support for XI2.3: Pointer barrier events and releases.
2012-12-17 15:01:45 +10:00
Delete stray ; in struct _DeviceChangedEvent
2014-02-09 17:21:20 -08:00
dix: Move DeviceFocusEvent from Xi into enterleave.c
2012-05-17 08:50:44 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
present: Add Present extension
2013-10-31 16:59:18 -07:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Clean up warnings in DIX
2014-01-12 10:14:49 -08:00
glx: drop GLX_LIBS from X server and workaround sdksyms.
2012-07-25 23:30:53 -07:00
config: Replace OdevAttributes linked list with struct
2014-07-17 17:10:48 -07:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
dix: split xi2_mask_isset into a per-device function
2012-12-12 17:25:16 +10:00
kdrive: Add option to compile out input drivers
2010-01-06 19:47:53 +06:00
include: fix documentation for list.h
2014-11-12 10:24:55 +10:00
systemd-logind: Add systemd-logind "core"
2014-03-03 08:13:55 +01:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Add a command line argument for disabling indirect GLX.
2014-04-23 13:24:22 -07:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Replace 'pointer' type with 'void *'
2014-01-12 10:24:11 -08:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
present: Don't use the major/minor version from the protocol headers
2013-12-13 14:59:04 -05:00
dix: indentation fixes for pointer acceleration
2012-05-16 10:59:35 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
dix: integer overflow in RegionSizeof() [CVE-2014-8092 3/4]
2014-12-08 18:09:47 -08:00
XSERVER_DTRACE needs request names from registry too
2014-09-22 12:00:46 -07:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
systemd-logind: let the logind code decided whether to close an fd
2014-05-05 07:26:33 +10:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Introduce a consistent coding style
2012-03-21 13:54:42 -07:00
Move to autoconf standard function name checks & defines
2011-12-05 14:32:45 -08:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
xkb: add a call to init an XkbRMLVOSet from const chars
2014-02-04 10:53:59 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
xfree86: Remove the memory of MTRR awareness
2014-09-16 11:58:53 -04:00
Add X_BYTE_ORDER to xorg-server.h
2014-07-31 21:42:04 -07:00
os/xprintf: add Xvscnprintf and Xscnprintf
2012-05-03 14:59:23 +10:00
Add missing labels for multitouch valuators
2012-10-30 15:11:10 +10:00
Drop trailing whitespaces
2014-11-12 10:25:00 +10:00
configure: Restore DEFAULT_LOGDIR to xwin-config.h, it is used
2014-06-02 13:07:46 +01:00
73c63afb93