summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Expand)Author
2021-07-14Fix out-of-bounds read in FontFileMakeDir()Alex Richardson
2021-03-02Fix use after free when font server connection lostPeter Harris
2020-03-06Fix crash when font server connection lostPeter Harris
2019-10-25Fix Win32 build since c4ed2e06 "Add some unit testing utilities"Jon Turney
2019-08-17fs_read_glyphs: check if rep is null before dereferencingAlan Coopersmith
2019-08-17CatalogueRescan: if opendir() fails, unref fpes, but don't free the catAlan Coopersmith
2019-08-17ComputeScaledProperties: check for valid pointers before making atomsAlan Coopersmith
2019-08-17stubs/atom.c: check for ResizeHashTable failureAlan Coopersmith
2019-08-17Fix whitespaceMaya Rashish
2019-08-04fontxlfd.c: tell gcc that switch fallthrough is intentionalAlan Coopersmith
2019-08-04Convert multiplying malloc calls to use mallocarray insteadAlan Coopersmith
2019-08-03Convert multiplying realloc calls to use reallocarray insteadAlan Coopersmith
2019-08-03Add reallocarray fallback if not provided by libc nor libbsdAlan Coopersmith
2019-08-03Use bounds checking string functions everywhereAlan Coopersmith
2019-08-03Add strlcat & strlcpy fallbacks if not provided by libc nor libbsdAlan Coopersmith
2018-03-24avoid -Wformat errors from clang when building with -DDEBUGRin Okuyama
2017-11-25Open files with O_NOFOLLOW. (CVE-2017-16611)Michal Srb
2017-10-04pcfGetProperties: Check string boundaries (CVE-2017-13722)Michal Srb
2017-10-04Check for end of string in PatternMatch (CVE-2017-13720)Michal Srb
2016-06-10freetype: Fix a logic error in computing face nameAdam Jackson
2016-05-30fserve: Fix a buffer read overrun in _fs_client_accessJeremy Huddleston Sequoia
2016-05-30fstrans: Remove unused foo() functionJeremy Huddleston Sequoia
2016-05-29fserve: Silence a -Wformat warningJeremy Huddleston Sequoia
2016-05-29bitmap: Bail out on invalid input to FontFileMakeDir instead of calling callo...Jeremy Huddleston Sequoia
2016-05-29FreeType: Correct an allocation sizeJeremy Huddleston Sequoia
2015-12-09Convert to non-recursive build.Matt Turner
2015-12-08Eliminate calls back to X server or font server functions by name (v4)libXfont2-2.0.0Keith Packard
2015-12-08Add compiler warning flags and fix warningsKeith Packard
2015-10-21Use NO_WEAK_SYMBOLS instead of -flat_namespaceJeremy Huddleston Sequoia
2015-10-21stubs: Add missing externs for declarations in the NO_WEAK_SYMBOLS && PIC stu...Jeremy Huddleston Sequoia
2015-10-20Fix is*() usage.Thomas Klausner
2015-07-28bdfReadCharacters: Allow negative DWIDTH valuesBenjamin Tissoires
2015-03-17bdfReadCharacters: ensure metrics fit into xCharInfo struct [CVE-2015-1804]Alan Coopersmith
2015-03-17bdfReadCharacters: bailout if a char's bitmap cannot be read [CVE-2015-1803]Alan Coopersmith
2015-03-17bdfReadProperties: property count needs range check [CVE-2015-1802]Alan Coopersmith
2015-02-26Set close-on-exec for font file I/O.Christos Zoulas
2014-11-05Use 'imdent' to realign cpp indentation levels in fslibos.hAlan Coopersmith
2014-11-05Remove unneeded checks for #ifndef X_NOT_POSIXAlan Coopersmith
2014-06-27Make shared library work on Cygwin/MinGWYaakov Selkowitz
2014-05-23Use default glyphs when getting 16-bit font with 8-bit textKeith Packard
2014-05-23Don't build unused code in bitmapfunc.c if all bitmap formats are disabledAlan Coopersmith
2014-05-23Don't compile bitmap source files for disabled formatsAlan Coopersmith
2014-05-23Drop imake/monolithic compatibility #define mappingAlan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_list_info()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_list()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_glyphs()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_extent_info()Alan Coopersmith
2014-05-12CVE-2014-0211: integer overflow in fs_alloc_glyphs()Alan Coopersmith
2014-05-12CVE-2014-0211: integer overflow in fs_read_extent_info()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_query_info()Alan Coopersmith