hashirama/xserver
Watch
0
0
Fork
You've already forked xserver
 0
mirror of https://github.com/X11Libre/xserver.git synced 2026-10-01 22:03:09 +00:00
Code Issues Projects Releases Wiki Activity
xserver/Xext
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Alan Coopersmith b680bda34d Fix a couple off-by-one array boundary checks. 
Error: Write outside array bounds at Xext/geext.c:406
        in function 'GEWindowSetMask' [Symbolic analysis]
       In array dereference of cli->nextSib[extension] with index 'extension'
       Array size is 128 elements (of 4 bytes each), index <= 128

Error: Buffer overflow at dix/events.c:592
	in function 'SetMaskForEvent' [Symbolic analysis]
       In array dereference of filters[deviceid] with index 'deviceid'
       Array size is 20 elements (of 512 bytes each), index >= 0 and index <= 20

Error: Read buffer overflow at hw/xfree86/loader/loader.c:226
	in function 'LoaderOpen' [Symbolic analysis]
       In array dereference of refCount[new_handle] with index 'new_handle'
       Array size is 256 elements (of 4 bytes each), index >= 1 and index <= 256

These bugs were found using the Parfait source code analysis tool.
For more information see http://research.sun.com/projects/parfait

Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com>
Signed-off-by: Adam Jackson <ajax@redhat.com>
Acked-by: Peter Hutterer <peter.hutterer@who-t.net>
2009-05-08 12:27:11 -07:00
..
bigreq.c xserver: Avoid sending uninitialized padding data over the network 2009-02-16 13:28:38 +10:00
dpms.c DPMS: Code motion. 2009-04-03 18:22:19 -04:00
dpmsproc.h DPMS: Remove unused DPMSGet() 2009-04-03 18:22:20 -04:00
dpmsstubs.c DPMS: Remove unused DPMSGet() 2009-04-03 18:22:20 -04:00
geext.c Fix a couple off-by-one array boundary checks. 2009-05-08 12:27:11 -07:00
geext.h Xext: fix typo in GEEventFill macro 2009-02-03 11:17:02 +10:00
geint.h Remove #define NEED_EVENTS and NEED_REPLIES 2008-12-12 11:43:32 +10:00
Makefile.am Revert accidental Makefile change from previous commit 2009-04-03 22:38:00 -04:00
mbuf.c Remove a bunch of useless casts. 2009-01-22 02:11:16 -05:00
mbufbf.c Remove a bunch of useless casts. 2009-01-22 02:11:16 -05:00
mbufpx.c Remove a bunch of useless casts. 2009-01-22 02:11:16 -05:00
panoramiX.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
panoramiX.h Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
panoramiXh.h Centralize declaration of ConnectionInfo. 2008-08-20 13:14:34 -04:00
panoramiXprocs.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
panoramiXsrv.h Rework symbol visibility for easier maintenance 2008-12-03 05:43:34 -02:00
panoramiXSwap.c Merge branch 'master' into mpx 2008-01-03 17:04:54 +10:30
saver.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
security.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
securitysrv.h Rework of the XC-SECURITY extension. The gen-auth protocol has not changed, 2007-11-08 16:32:42 -05:00
shape.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
shm.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
shmint.h Rework symbol visibility for easier maintenance 2008-12-03 05:43:34 -02:00
sleepuntil.c Remove a bunch of useless casts. 2009-01-22 02:11:16 -05:00
sleepuntil.h
sync.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
syncsrv.h Fix syncsrv.h guard define 2008-12-11 17:04:37 -05:00
xace.c Remove a bunch of useless casts. 2009-01-22 02:11:16 -05:00
xace.h Update sdk headers to export new symbols. 2009-01-05 16:49:57 -02:00
xacestr.h XACE: Add generic support for property and selection polyinstantiation. 2008-02-29 18:01:37 -05:00
xcalibrate.c Remove #define NEED_EVENTS and NEED_REPLIES 2008-12-12 11:43:32 +10:00
xcmisc.c Xext: ANSI cleanups 2009-01-11 08:54:10 +01:00
xf86bigfont.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
xres.c Remove #define NEED_EVENTS and NEED_REPLIES 2008-12-12 11:43:32 +10:00
xselinux.c xselinux: Don't BadAlloc in List* requests if there are no items to list. 2009-04-09 02:48:04 -04:00
xselinux.h XSELinux: Add a request to get a client's context from a resource ID. 2008-03-31 17:35:10 -04:00
xtest.c Xext: shut up compiler warnings in xtest.c 2009-05-05 14:12:04 +10:00
xvdisp.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
xvdisp.h Fix swapped Xv dispatch under Xinerama. 2007-12-02 14:15:36 -05:00
xvdix.h Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
xvmain.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
xvmc.c Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
xvmcext.h Use libtool convenience libraries and better "symbol" table. 2008-12-07 02:22:19 -02:00