xserver/dix
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Jeremy Huddleston Sequoia e84a8065c4 RegionValidate: Fix double free of badreg->data on the error path
RegionValidate() copies *badreg into ri[0].reg, so ri[0].reg.data aliases badreg->data. A later
RECTALLOC_BAIL() can realloc() that block and move it, updating ri[0].reg.data but not badreg->data. On
the bail path, freeing ri[0].reg.data and then calling RegionBreak(badreg) frees badreg->data a second
time, which by then is a stale pointer into memory already freed or reallocated to something else.

Signed-off-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2281>
(cherry picked from commit 4ef1b4cd26)
(cherry picked from commit bb02769445b1a516f33b4855977cc227f0542cb7)
(cherry picked from commit bc0760d9514fe5f2d9e4f5287ab0318d45c32736)
2026-10-01 18:52:29 +02:00
..
.gitignore
atom.c treewide: clean up includes of misc.h 2026-06-19 19:24:57 +02:00
atom_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
BuiltInAtoms
callback_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
client.c license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
client_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
color.c treewide: replace min/max macros by non-exported MIN/MAX and deprecate them 2026-06-25 14:06:17 +02:00
colormap.c xext: panoramiX: helpers for checking wether it's enabled/disabled 2026-07-24 17:27:51 +02:00
colormap_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
connsetup.c Xext: panoramiX: let PanoramiXCreateConnectionBlock() return rpcbuf 2026-09-29 16:11:03 +02:00
cursor.c treewide: fix result type of BitmapBytePad() to size_t 2026-06-29 15:44:48 +02:00
cursor_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
devices.c treewide: replace min/max macros by non-exported MIN/MAX and deprecate them 2026-06-25 14:06:17 +02:00
devices_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
dispatch.c xfixes: implement 6.1: forced server shutdown on client disconnect 2026-09-29 12:23:40 +02:00
dispatch.h dix: move include guards up to wrap the whole file 2025-11-21 15:20:11 +01:00
display.c license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
dix_priv.h Disable font server connections by default 2026-09-29 18:24:47 +02:00
dixfonts.c Disable font server connections by default 2026-09-29 18:24:47 +02:00
dixgrabs_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
dixstruct_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
dixutils.c dix: use stdbool's 'bool' instead of 'Bool' for local variables 2026-07-27 10:28:52 +02:00
enterleave.c Xi: move it under Xext/xinput 2026-06-17 16:25:12 +02:00
enterleave.h dix: move include guards up to wrap the whole file 2025-11-21 15:20:11 +01:00
eventconvert.c treewide: clean up includes of misc.h 2026-06-19 19:24:57 +02:00
eventconvert.h dix: unexport eventconvert.h functions 2024-03-11 12:26:44 +01:00
events.c xfixes: implement 6.1: forced server shutdown on client disconnect 2026-09-29 12:23:40 +02:00
exevents_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
extension.c Xext: remove the XF86-BigFont extension 2026-07-27 18:31:44 +02:00
extension_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
gc.c dix: parentheses around macro argument symbols 2026-06-25 06:54:55 +02:00
gc_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
generate-atoms dix: don't include dix-config.h from randrstr.h 2025-07-23 15:46:51 +02:00
gestures.c dix: use stdbool's 'bool' instead of 'Bool' for local variables 2026-07-27 10:28:52 +02:00
getevents.c dix: use stdbool's 'bool' instead of 'Bool' for local variables 2026-07-27 10:28:52 +02:00
globals.c Add Support for DPI Auto-Detection 2026-08-31 14:37:35 +02:00
glyphcurs.c treewide: clean up includes of misc.h 2026-06-19 19:24:57 +02:00
grabs.c dix: use stdbool's 'bool' instead of 'Bool' for local variables 2026-07-27 10:28:52 +02:00
input_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
inputdev.c dix: add new lookup functions for input devices via config_string 2026-07-31 16:06:26 +02:00
inputdev_priv.h dix: add new lookup functions for input devices via config_string 2026-07-31 16:06:26 +02:00
inpututils.c treewide: replace min/max macros by non-exported MIN/MAX and deprecate them 2026-06-25 14:06:17 +02:00
inpututils_priv.h treewide: drop including <dix-config.h> from private includes 2025-12-04 19:50:44 +01:00
lookup.c license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
main.c xext: panoramix: simplify PanoramiXConsolidate() calls 2026-09-28 19:50:33 +02:00
meson.build dix: factor out sending connection abort to own function 2026-09-24 15:19:10 +02:00
pixmap.c treewide: clean up includes of misc.h 2026-06-19 19:24:57 +02:00
privates.c dix: fix missing includes of <assert.h> 2026-06-18 17:36:59 +02:00
property.c xext: panoramiX: helpers for checking wether it's enabled/disabled 2026-07-24 17:27:51 +02:00
property_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
protocol.txt Xext: remove the XF86-BigFont extension 2026-07-27 18:31:44 +02:00
ptrveloc.c dix: ptrveloc: fix NULL-deref/div-by-zero on tracker alloc failure 2026-08-24 13:40:57 +02:00
ptrveloc_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
region.c RegionValidate: Fix double free of badreg->data on the error path 2026-10-01 18:52:29 +02:00
registry.c dix/registry: decrement the buffer size in __accbit 2026-09-21 17:51:38 +02:00
registry_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
reqhandlers_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
request_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
resource.c xext: panoramiX: helpers for checking wether it's enabled/disabled 2026-07-24 17:27:51 +02:00
resource_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
rpcbuf.c license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
rpcbuf_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
saveset_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
screen.c license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
screen_hooks.c license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
screen_hooks_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
screenint_priv.h dix: DIX_FOR_N_SCREENS — make self-contained (ternary instead of MIN) 2026-09-24 14:23:13 +02:00
screensaver_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
selection.c dix: use stdbool's 'bool' instead of 'Bool' for local variables 2026-07-27 10:28:52 +02:00
selection_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
server_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
settings.c license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
settings_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00
sleepuntil.c dix: sleepuntil: use struct xorg_list instead of own list logic 2026-06-25 15:46:11 +02:00
sleepuntil.h Xext: move sleepuntil.c to dix 2026-06-19 09:37:22 +02:00
stubmain.c
swaprep.c dix: refactor sending out the connection setup prefix 2026-09-24 19:59:25 +02:00
swaprep.h dix: refactor sending out the connection setup prefix 2026-09-24 19:59:25 +02:00
swapreq.c treewide: clean up includes of misc.h 2026-06-19 19:24:57 +02:00
swapreq.h dix: inline SProcQueryColor() 2026-01-31 16:16:19 +01:00
tables.c dix: inline SProcGrabButton() 2026-01-31 16:20:28 +01:00
touch.c dix: use stdbool's 'bool' instead of 'Bool' for local variables 2026-07-27 10:28:52 +02:00
window.c dix: use stdbool's 'bool' instead of 'Bool' for local variables 2026-07-27 10:28:52 +02:00
window_priv.h license: add X11 OR MIT OR AGPL-3.0-or-later to Enrico Weigelt's source files 2026-07-29 10:02:59 +02:00