summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Expand)Author
2017-10-19pcfGetProperties: Check string boundaries (CVE-2017-13722)Michal Srb
2017-10-19Check for end of string in PatternMatch (CVE-2017-13720)Michal Srb
2016-05-30fserve: Fix a buffer read overrun in _fs_client_accessJeremy Huddleston Sequoia
2016-05-30fserve: Silence a -Wformat warningJeremy Huddleston Sequoia
2016-05-30bitmap: Bail out on invalid input to FontFileMakeDir instead of calling callo...Jeremy Huddleston Sequoia
2016-05-30FreeType: Correct an allocation sizeJeremy Huddleston Sequoia
2016-05-30Fix warningsKeith Packard
2015-10-21Use NO_WEAK_SYMBOLS instead of -flat_namespaceJeremy Huddleston Sequoia
2015-10-21stubs: Add missing externs for declarations in the NO_WEAK_SYMBOLS && PIC stu...Jeremy Huddleston Sequoia
2015-10-20Fix is*() usage.Thomas Klausner
2015-07-28bdfReadCharacters: Allow negative DWIDTH valuesBenjamin Tissoires
2015-03-17bdfReadCharacters: ensure metrics fit into xCharInfo struct [CVE-2015-1804]Alan Coopersmith
2015-03-17bdfReadCharacters: bailout if a char's bitmap cannot be read [CVE-2015-1803]Alan Coopersmith
2015-03-17bdfReadProperties: property count needs range check [CVE-2015-1802]Alan Coopersmith
2015-02-26Set close-on-exec for font file I/O.Christos Zoulas
2014-11-05Use 'imdent' to realign cpp indentation levels in fslibos.hAlan Coopersmith
2014-11-05Remove unneeded checks for #ifndef X_NOT_POSIXAlan Coopersmith
2014-06-27Make shared library work on Cygwin/MinGWYaakov Selkowitz
2014-05-23Use default glyphs when getting 16-bit font with 8-bit textKeith Packard
2014-05-23Don't build unused code in bitmapfunc.c if all bitmap formats are disabledAlan Coopersmith
2014-05-23Don't compile bitmap source files for disabled formatsAlan Coopersmith
2014-05-23Drop imake/monolithic compatibility #define mappingAlan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_list_info()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_list()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_glyphs()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_extent_info()Alan Coopersmith
2014-05-12CVE-2014-0211: integer overflow in fs_alloc_glyphs()Alan Coopersmith
2014-05-12CVE-2014-0211: integer overflow in fs_read_extent_info()Alan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length fields in fs_read_query_info()Alan Coopersmith
2014-05-12CVE-2014-0211: Integer overflow in fs_get_reply/_fs_start_readAlan Coopersmith
2014-05-12CVE-2014-0210: unvalidated lengths when reading replies from font serverAlan Coopersmith
2014-05-12CVE-2014-0210: unvalidated length in _fs_recv_conn_setup()Alan Coopersmith
2014-05-12CVE-2014-0209: integer overflow of realloc() size in lexAlias()Alan Coopersmith
2014-05-12CVE-2014-0209: integer overflow of realloc() size in FontFileAddEntry()Alan Coopersmith
2014-04-24fs_send_open_font needs to allow namelen of 0 when FontReopen is setAlan Coopersmith
2014-04-23Clean up warnings when src/fc is built with -DDEBUGAlan Coopersmith
2014-04-23Allow enabling src/fc DEBUG helpers via CPPFLAGSAlan Coopersmith
2014-04-21Check if pointer returned by BufFileCreate is NULL before writing to itAlan Coopersmith
2014-04-11Fix buffer read overrunPeter Harris
2014-01-29Warning fixes.Keith Packard
2014-01-08Remove redundant setting of 'len' in SPropRecValList_add_by_font_capAlan Coopersmith
2014-01-08Initialize (unused) data field in fsListCataloguesReq before sending it.Alan Coopersmith
2014-01-08Remove redundant declaration of FontFileStartListFonts()Alan Coopersmith
2014-01-08Fix unused variable 'dir' warningsAlan Coopersmith
2013-12-30Limit additional sscanf strings to fit buffer sizesAlan Coopersmith
2013-12-30CVE-2013-6462: unlimited sscanf overflows stack buffer in bdfReadCharacters()Alan Coopersmith
2013-12-13Don't leak old allocation if realloc fails to enlarge itAlan Coopersmith
2013-11-22Make serverGeneration unsignedJulien Cristau
2013-11-01Replace malloc(strlen)+strcpy/strcat calls with strdupAlan Coopersmith
2013-11-01xstrdup -> strdupAlan Coopersmith