summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-11-01updateJonathan Gray
2018-11-01syncJonathan Gray
2018-11-01Merge libdrm 2.4.96Jonathan Gray
2018-11-01Import libdrm 2.4.96Jonathan Gray
2018-10-31Make similiar changes to the i386 tsd dispatch assembly as libglvnd toJonathan Gray
avoid a text relocation fixing the build with lld. ok kettenis@ naddy@
2018-10-29regenJonathan Gray
2018-10-29Don't attempt to rebuild spirv_info.c if timestamp on source filesJonathan Gray
changed as python won't be in path. someone in this situation mentioned it to landry@
2018-10-28Pass the correct buffer length to strlcpy() to avoid truncation.Matthieu Herrb
Problem noticed by Edgar Pettijohn III, ok tb@
2018-10-26Add a few \n I missed to add in some fprintf(3)s in my last commitRicardo Mestre
2018-10-26If input_name is provided we can unveil(2) it with read permissions, ifRicardo Mestre
output_name is provided we need to unveil(2) this one with rwc. Additionally depending on the different combinations of if these files are passed via args or from stdin/to stdout we can also pledge(2) accordingly to the code path. OK deraadt@
2018-10-25Disable setuid on the X server. We have always known it is a trash fireTheo de Raadt
and we held out hope too long. This will break some stuff. Let's start with non-setuid as the baseline, and see if it is worth trying to fix the broken parts in some other way.
2018-10-25MFC: Disable -logfile and -modulepath when running with elevatedMatthieu Herrb
privileges. This Could cause arbitrary files overwrite. CVE-2018-14665.
2018-10-25xserver's priv proc is responsible for opening devices in O_RDWR mode and sendRicardo Mestre
their fds over to the parent proc. Knowing this then we already have a list of all possible devices that might be opened in the future, in struct okdev allowed_devices[], and we just need to traverse them and unveil(2) each one with read/write permissions. positive feedback from semarie@, OK matthieu@
2018-10-23syncJonathan Gray
2018-10-23updateJonathan Gray
2018-10-23Merge Mesa 17.3.9Jonathan Gray
Mesa 18.x needs an ld with build-id for at least the intel code Mesa 18.2 assumes linux only memfd syscalls in intel code Tested by matthieu@, kettenis@ and myself on a variety of hardware and architectures. ok kettenis@
2018-10-23Import Mesa 17.3.9Jonathan Gray
2018-10-23Import Mesa 17.3.9Jonathan Gray
2018-10-23Import Mesa 17.3.9Jonathan Gray
2018-10-20updateMatthieu Herrb
2018-10-20Update to libSM 1.2.3Matthieu Herrb
2018-10-20Update to libX11 1.6.7Matthieu Herrb
2018-10-20Explicitely disable xf86miscMatthieu Herrb
2018-10-16updateMatthieu Herrb
2016-12-11Import Mesa 13.0.2Jonathan Gray
2015-11-22import Mesa 11.0.6Jonathan Gray
2015-11-22import Mesa 11.0.6Jonathan Gray
2015-11-22import Mesa 11.0.6Jonathan Gray
2015-11-22import Mesa 11.0.6Jonathan Gray
2018-10-04Update to libxcb 1.13.1, a small bug fix release.Matthieu Herrb
ok naddy@
2018-09-30updateMatthieu Herrb
2018-09-27syncTheo de Raadt
2018-09-18syncTheo de Raadt
2018-09-13updateJonathan Gray
2018-09-13syncJonathan Gray
2018-09-13Merge libdrm 2.4.94Jonathan Gray
2018-09-13Import libdrm 2.4.94Jonathan Gray
2018-09-11updateMatthieu Herrb
2018-09-11syncMatthieu Herrb
2018-09-11Update to libxcb 1.13. ok tb@Matthieu Herrb
2018-09-11Update to xcb-proto 1.13. ok tb@Matthieu Herrb
2018-09-06Add an option to disable the active area. From Sebastien Marie.Matthieu Herrb
ok claudio@ Thanks.
2018-08-28syncTheo de Raadt
2015-08-21Import libdrm 2.4.64Jonathan Gray
2018-08-27Build radeon drivers on arm64.Mark Kettenis
ok jsg@, matthieu@
2018-08-27Build xf86-video-ati on arm64.Mark Kettenis
ok jsg@, matthieu@
2018-08-23updateMatthieu Herrb
2018-08-23syncMatthieu Herrb
2018-08-23Udate to libX11 1.6.6. bug fixes release - no API/ABI changes.Matthieu Herrb
2018-08-20Initialize PCI subsystem on arm64.Mark Kettenis
ok matthieu@