xserver/randr
Repository files (latest commit first)
Filename Latest commit message Latest commit date
hongao b146da67fe randr: clear primary screen's primaryOutput when the output is deleted
This fix use after free when a pluggable gpu screen (such as displaylink)
was set as primary screen and unpluged.

gdb backtrace:
 #0 OssigHandler (signo=11, sip=0x7fff2e0a50f0, unused=0x7fff2e0a4fc0) at ../../../../os/osinit.c:138
 #1 <signal handler called>
 #2 rrGetscreenResources (client=0x3195160, query=0) at ../../../../randr/rrscreen.c:577
 #3 0x0000000000562bae in ProcRRGetscreenResourcesCurrent (client=0x3195160) at ../../../../randr/rrscreen.c:652
 #4 OxOOOOB0000054de63 in ProcRRDispatch (client=0x3195160) at ../../../../randr/randr.c:717
 #5 0x00000000004322c6 in Dispatch () at ../../../../dix/dispatch.c:485
 #6 0x0900900990443139 in dix_main (argc=12, argv=0x7fff2e0a5f78, envp=0x7fff2e0a5fe0) at ../../../../dix/main.c:276
 #7 0X0000000000421d9a in main (argc=12, argv=0x7fff2e0a5f78, envp=0x7fff2e0a5fe0) at ../../../../dix/stubmain.c:34

Signed-off-by: hongao <hongao@uniontech.com>
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1553>
2026-04-21 10:43:05 +02:00
..
meson.build treewide: remove "lib" prefix in static_library names (meson) 2025-07-03 12:01:52 +02:00
randr.c miext: move over extinit_priv.h from include 2025-06-12 17:21:46 +02:00
randrstr.h randr: export RRGetOutputProperty for nvidia 2025-06-16 10:32:48 +02:00
randrstr_priv.h randr: export RRGetOutputProperty for nvidia 2025-06-16 10:32:48 +02:00
rrcrtc.c randr: fix BUG_RETURN_VAL check 2025-06-16 10:32:48 +02:00
rrdispatch.c randr: use calloc() instead of malloc() 2025-06-12 16:49:37 +02:00
rrdispatch_priv.h randr: move remaining dispatch prototypes to rrdispatch.h 2025-06-12 16:27:20 +02:00
rrinfo.c randr: use calloc() instead of malloc() 2025-06-12 16:49:37 +02:00
rrlease.c randr: move remaining dispatch prototypes to rrdispatch.h 2025-06-12 16:27:20 +02:00
rrmode.c dix: add dixAllocServerXID() 2025-06-12 17:21:48 +02:00
rrmonitor.c randr: use calloc() instead of malloc() 2025-06-12 16:49:37 +02:00
rroutput.c randr: clear primary screen's primaryOutput when the output is deleted 2026-04-21 10:43:05 +02:00
rrpointer.c randr: unexport and document RRCrtcGetScanoutSize() 2025-06-12 16:27:50 +02:00
rrproperty.c randr: replace xallocarray() by calloc() 2025-06-12 17:21:43 +02:00
rrprovider.c dix: add dixAllocServerXID() 2025-06-12 17:21:48 +02:00
rrproviderproperty.c randr: fix size parameter to WriteToClient() 2025-08-14 16:48:07 +02:00
rrscreen.c randr: do full transform when checking SetScreenSize size 2026-04-21 10:33:04 +02:00
rrsdispatch.c randr: unexport screen related request handlers 2025-06-12 16:27:05 +02:00
rrtransform.c randr: replace xallocarray() by calloc() 2025-06-12 17:21:43 +02:00
rrtransform.h randr: unexport and document RRTransformCopy() 2025-06-12 16:30:10 +02:00
rrxinerama.c