lib/libXfont - Xfont library

Age	Commit message (Expand)	Author
2017-11-25	Open files with O_NOFOLLOW. (CVE-2017-16611)	Michal Srb
2017-10-19	pcfGetProperties: Check string boundaries (CVE-2017-13722)	Michal Srb
2017-10-19	Check for end of string in PatternMatch (CVE-2017-13720)	Michal Srb
2016-05-30	fserve: Fix a buffer read overrun in _fs_client_access	Jeremy Huddleston Sequoia
2016-05-30	fserve: Silence a -Wformat warning	Jeremy Huddleston Sequoia
2016-05-30	bitmap: Bail out on invalid input to FontFileMakeDir instead of calling callo...	Jeremy Huddleston Sequoia
2016-05-30	FreeType: Correct an allocation size	Jeremy Huddleston Sequoia
2016-05-30	Fix warnings	Keith Packard
2015-10-21	Use NO_WEAK_SYMBOLS instead of -flat_namespace	Jeremy Huddleston Sequoia
2015-10-21	stubs: Add missing externs for declarations in the NO_WEAK_SYMBOLS && PIC stu...	Jeremy Huddleston Sequoia
2015-10-20	Fix is*() usage.	Thomas Klausner
2015-07-28	bdfReadCharacters: Allow negative DWIDTH values	Benjamin Tissoires
2015-03-17	bdfReadCharacters: ensure metrics fit into xCharInfo struct [CVE-2015-1804]	Alan Coopersmith
2015-03-17	bdfReadCharacters: bailout if a char's bitmap cannot be read [CVE-2015-1803]	Alan Coopersmith
2015-03-17	bdfReadProperties: property count needs range check [CVE-2015-1802]	Alan Coopersmith
2015-02-26	Set close-on-exec for font file I/O.	Christos Zoulas
2014-11-05	Use 'imdent' to realign cpp indentation levels in fslibos.h	Alan Coopersmith
2014-11-05	Remove unneeded checks for #ifndef X_NOT_POSIX	Alan Coopersmith
2014-06-27	Make shared library work on Cygwin/MinGW	Yaakov Selkowitz
2014-05-23	Use default glyphs when getting 16-bit font with 8-bit text	Keith Packard
2014-05-23	Don't build unused code in bitmapfunc.c if all bitmap formats are disabled	Alan Coopersmith
2014-05-23	Don't compile bitmap source files for disabled formats	Alan Coopersmith
2014-05-23	Drop imake/monolithic compatibility #define mapping	Alan Coopersmith
2014-05-12	CVE-2014-0210: unvalidated length fields in fs_read_list_info()	Alan Coopersmith
2014-05-12	CVE-2014-0210: unvalidated length fields in fs_read_list()	Alan Coopersmith
2014-05-12	CVE-2014-0210: unvalidated length fields in fs_read_glyphs()	Alan Coopersmith
2014-05-12	CVE-2014-0210: unvalidated length fields in fs_read_extent_info()	Alan Coopersmith
2014-05-12	CVE-2014-0211: integer overflow in fs_alloc_glyphs()	Alan Coopersmith
2014-05-12	CVE-2014-0211: integer overflow in fs_read_extent_info()	Alan Coopersmith
2014-05-12	CVE-2014-0210: unvalidated length fields in fs_read_query_info()	Alan Coopersmith
2014-05-12	CVE-2014-0211: Integer overflow in fs_get_reply/_fs_start_read	Alan Coopersmith
2014-05-12	CVE-2014-0210: unvalidated lengths when reading replies from font server	Alan Coopersmith
2014-05-12	CVE-2014-0210: unvalidated length in _fs_recv_conn_setup()	Alan Coopersmith
2014-05-12	CVE-2014-0209: integer overflow of realloc() size in lexAlias()	Alan Coopersmith
2014-05-12	CVE-2014-0209: integer overflow of realloc() size in FontFileAddEntry()	Alan Coopersmith
2014-04-24	fs_send_open_font needs to allow namelen of 0 when FontReopen is set	Alan Coopersmith
2014-04-23	Clean up warnings when src/fc is built with -DDEBUG	Alan Coopersmith
2014-04-23	Allow enabling src/fc DEBUG helpers via CPPFLAGS	Alan Coopersmith
2014-04-21	Check if pointer returned by BufFileCreate is NULL before writing to it	Alan Coopersmith
2014-04-11	Fix buffer read overrun	Peter Harris
2014-01-29	Warning fixes.	Keith Packard
2014-01-08	Remove redundant setting of 'len' in SPropRecValList_add_by_font_cap	Alan Coopersmith
2014-01-08	Initialize (unused) data field in fsListCataloguesReq before sending it.	Alan Coopersmith
2014-01-08	Remove redundant declaration of FontFileStartListFonts()	Alan Coopersmith
2014-01-08	Fix unused variable 'dir' warnings	Alan Coopersmith
2013-12-30	Limit additional sscanf strings to fit buffer sizes	Alan Coopersmith
2013-12-30	CVE-2013-6462: unlimited sscanf overflows stack buffer in bdfReadCharacters()	Alan Coopersmith
2013-12-13	Don't leak old allocation if realloc fails to enlarge it	Alan Coopersmith
2013-11-22	Make serverGeneration unsigned	Julien Cristau
2013-11-01	Replace malloc(strlen)+strcpy/strcat calls with strdup	Alan Coopersmith