xserver/Xext/namespace
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Enrico Weigelt, metux IT consult 5f85319446
Some checks failed
Build X servers / ubuntu-fetch-pkg (push) Has been cancelled
Build X servers / abi-changes-check (push) Has been cancelled
Build X servers / xserver-build-macos (push) Has been cancelled
Build X servers / xserver-build-cygwin (push) Has been cancelled
Build X servers / xserver-build-arch (push) Has been cancelled
Build X servers / Check Signed-Off-By (push) Has been cancelled
check PRs for merge conflicts / notify (push) Has been cancelled
Build X servers / xserver-build-ubuntu-no-gbm (push) Has been cancelled
Build X servers / xserver-build-ubuntu (push) Has been cancelled
Build X servers / xserver-build-ubuntu-debug (push) Has been cancelled
Build X servers / ubuntu-deps-image (push) Has been cancelled
Build X servers / build-sdk-image (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-elographics:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-evdev:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-joystick:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-keyboard:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-libinput:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-mouse:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-synaptics:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-vmmouse:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-void:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (input-wacom:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-amdgpu:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-apm:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-ark:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-ast:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-ati:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-chips:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-cirrus:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-dummy:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-fbdev:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-freedreno:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-geode:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-i128:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-i740:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-intel:25.0.1) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-mach64:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-mga:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-neomagic:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-nested:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-nouveau:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-nv:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-omap:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-qxl:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-r128:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-rendition:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-s3virge:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-savage:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-siliconmotion:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-sis:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-sisusb:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-suncg14:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-suncg3:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-suncg6:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-sunffb:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-sunleo:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-suntcx:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-tdfx:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-trident:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-v4l:25.0.1) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-vbox:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-vesa:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-vmware:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-voodoo:25.0.0) (push) Has been cancelled
Build X servers / drivers-build-ubuntu (video-xgi:25.0.0) (push) Has been cancelled
Build X servers / xserver-build-mingw32-ubuntu (push) Has been cancelled
Build X servers / xserver-build-freebsd (push) Has been cancelled
Build X servers / xserver-build-dragonflybsd (push) Has been cancelled
Build X servers / xserver-build-netbsd (push) Has been cancelled
Build X servers / xserver-build-solaris (push) Has been cancelled
Build X servers / xserver-build-openbsd (push) Has been cancelled
Build X servers / xserver-build-hurd (push) Has been cancelled
Build X servers / xserver-build-alpine (push) Has been cancelled
Build X servers / gentoo-deps-image (push) Has been cancelled
Build X servers / xserver-build-gentoo (push) Has been cancelled
Build X servers / xserver-build-rhel (10) (push) Has been cancelled
Build X servers / xserver-build-rhel (9) (push) Has been cancelled
Build X servers / Release pushed tag (push) Has been cancelled
Xext: namespace: allow CreateColormap against the real root window
The real-root-window allowlist in hookResourceAccess() covered
CreateWindow/CreateGC/CreatePixmap/DestroyWindow/TranslateCoords/
QueryTree/ChangeWindowAttributes/QueryPointer/SendEvent/XInput, but
missed CreateColormap - which, like CreateGC/CreatePixmap, only needs
read-only access to the root window to find its screen/visual. Without
it, any confined (non-superPower) client creating a colormap against
the real root - which glxgears and most GL/visual-using clients do on
startup - got BadAccess and could never render.

Reproduced end-to-end: a FlyingTux-managed glxgears container confined
to its own namespace failed with 'X Error: BadAccess, Request Major
code 78 (CreateColormap)' until this was added; with it, the client
renders normally while namespace refcounts confirm it stayed confined
to its own namespace throughout.

Signed-off-by: Enrico Weigelt, metux IT consult <enrico.weigelt@vnc.biz>
2026-07-03 20:05:08 +02:00
..
config.c Xext: namespace: fix NULL-deref crash for protocol-created namespaces 2026-07-03 20:05:08 +02:00
hook-client.c dix: replace XACE_CLIENT_ACCESS by direct callback 2025-09-29 11:24:13 +02:00
hook-clientstate.c Xext: namespace: fix NULL derefence on client close 2025-09-26 16:28:17 +02:00
hook-device.c dix: replace XACE_CLIENT_ACCESS by direct callback 2025-10-07 10:52:54 +02:00
hook-ext-access.c Xext: namespace: add Xnamespace management protocol extension 2026-07-03 20:05:08 +02:00
hook-ext-dispatch.c Xext: namespace: add Xnamespace management protocol extension 2026-07-03 20:05:08 +02:00
hook-init-rootwindow.c Xext: namespace: fix NULL-deref crash for protocol-created namespaces 2026-07-03 20:05:08 +02:00
hook-property.c Xnamespace: property access hook 2025-06-12 17:21:48 +02:00
hook-receive.c treewide: drop unnecessary includes of Xi/eglobals.h 2025-09-09 14:41:10 +02:00
hook-resource.c Xext: namespace: allow CreateColormap against the real root window 2026-07-03 20:05:08 +02:00
hook-selection.c Xext: use dixAddAtom() 2025-07-23 12:24:27 +02:00
hook-send.c Xnamespace: filter client-to-client message sending 2025-06-12 17:21:48 +02:00
hook-server.c dix: replace XACE_SERVER_ACCESS by direct callback 2025-09-25 14:27:41 +02:00
hook-windowproperty.c xext: namespace: fix printf format string 2025-12-10 19:58:21 +01:00
hooks.h Xext: namespace: fix NULL derefence on client close 2025-09-26 16:28:17 +02:00
meson.build Xext: namespace: add Xnamespace management protocol extension 2026-07-03 20:05:08 +02:00
namespace.c Xext: namespace: add Xnamespace management protocol extension 2026-07-03 20:05:08 +02:00
namespace.h Xext: namespace: fix NULL-deref crash for protocol-created namespaces 2026-07-03 20:05:08 +02:00
namespaceproto.h Xext: namespace: add Xnamespace management protocol extension 2026-07-03 20:05:08 +02:00
ns.conf.example namespace: fix naming in examples, errors and comments 2025-08-13 11:50:13 +02:00
proto.c Xext: namespace: add Xnamespace management protocol extension 2026-07-03 20:05:08 +02:00