| Age | Commit message (Collapse) | Author |
|---|
|
It was needed at some point in the past, but doesn't compile and
isn't needed with clang. Reported by jsg@.
|
|
and NOTE_CHANGE to notify the desktop environment to deal with
the change (e.g. after plugging in an HDMI cable)
with this change there is no need to manually do any randr commands
if your desktop environment supports it (gnome, mate, kde, etc.)
ok matthieu@, kettenis@
|
|
Tested by bru@, jsg@ and others
|
|
ok matthieu@
|
|
|
|
ProcDbeGetVisualInfo (CVE-2017-12177)
v2: Protect against integer overflow (Alan Coopersmith)
|
|
(CVE-2017-12178)
|
|
(S)ProcXIBarrierReleasePointer
[jcristau: originally this patch fixed the same issue as commit
211e05ac85 "Xi: Test exact size of XIBarrierReleasePointer", with the
addition of these checks]
This addresses CVE-2017-12179
|
|
Otherwise a client can send any value of num_barriers and cause
reading or swapping of values on heap behind the receive buffer.
|
|
This addresses:
CVE-2017-12180 in XFree86-VidModeExtension
CVE-2017-12181 in XFree86-DGA
CVE-2017-12182 in XFree86-DRI
|
|
v2: Use before swap (Jeremy Huddleston Sequoia)
v3: Fix wrong XFixesCopyRegion checks (Alan Coopersmith)
|
|
v2: Add overflow check and remove unnecessary check (Julien Cristau)
This addresses:
CVE-2017-12184 in XINERAMA
CVE-2017-12185 in MIT-SCREEN-SAVER
CVE-2017-12186 in X-Resource
CVE-2017-12187 in RENDER
|
|
A client can send a big request where the 32B "length" field has value
0. When the big request header is removed and the length corrected,
the value will underflow to 0xFFFFFFFF. Functions processing the
request later will think that the client sent much more data and may
touch memory beyond the receive buffer.
|
|
Generating strings for XKB data used a single shared static buffer,
which offered several opportunities for errors. Use a ring of
resizable buffers instead, to avoid problems when strings end up
longer than anticipated.
|
|
XkbStringText escapes non-printable characters using octal numbers.
Such escape sequence would be at most 5 characters long ("\0123"), so
it reserves 5 bytes in the buffer. Due to char->unsigned int
conversion, it would print much longer string for negative numbers.
|
|
Otherwise it can belong to a non-existing client and abort X server with
FatalError "client not in use", or overwrite existing segment of another
existing client.
|
|
stsp@ reported that modesetting(4) has been reported unreliable
on his laptop, while intel(4) works.
XXXX to be removed after 6.2 to figure out and fix the issue.
ok kettenis@, also discussed briefly with deraadt@ during EuroBSDCon.
|
|
It is supposed to be slow, and when such instructions are used to copy
data from/to mapped video memory, some hypervisors (e.g. KVM,
Microsoft Hyper-V) can generate SIGILL or SIGBUS exceptions, causing
Xorg to crash.
Bug report to OpenBSD by Max Parmer, fix from FreeBSD (Dimitry Andric)
via kettenis@
ok kettenis@
|
|
care of autoconfiguration based on the information returned by the
WSDISPLAYIO_GTYPE ioctl of the console FD. This should fix selection of
wsfb on loongson and sgi when using a non-KMS kernel driver.
ok matthieu@, jsg@
|
|
later. This matches what several Linux distros do these days as it tends to
work better than the intel driver in most cases.
There are some performance issues with vncviewer on at least Ivy Bridge and
Haswell. But for now that regression outweighs the benefits.
ok robert@, tedu@, sthen@
|
|
KMS connector property of the same name if such a property is present.
ok matthieu@
|
|
(CVE-2017-10971 and CVE-2017-10972).
|
|
OK jsg@
|
|
ok matthieu@
|
|
the xorg-devel list. Thanks
|
|
of the unused *ToID functions(). Spotted by Adam Jackson on xorg-devel
list. Thanks.
|
|
|
|
And the current code for MitToId has a use-after-free() issue.
Advisory X41-2017-001: Multiple Vulnerabilities in X.Org
|
|
Advisory X41-2017-001: Multiple Vulnerabilities in X.Org.
|
|
Advisory X41-2017-001: Multiple Vulnerabilities in X.Org.
|
|
|
|
|
|
|
|
- constify name field
- rename devname -> devnam
- replace deprecated Xprintf() with asprintf()
|
|
|
|
include wscons headers after sys/ioct.h and sys/select.h
with deraadt@ and kettenis@
|
|
ok matthieu@
|
|
|
|
tested by krw@ and dcoppa@ ok dcoppa@
|
|
reported by deraadt@, fix reviewed in X.Org by Keith Packard.
|
|
Recent X server doesn't require to build the DIX with different
options for xfree86 and kdrive.
Tested for beeing a no-op on m88k by Kenji Aoyama. Thanks
|
|
Note that indirect GLX is now disbled by default.
|
|
|
|
|
|
Problem noticed by sthen@.
|
|
|
|
wscons console backend and use it by default.
ok kettenis@
|
|
Completely broken on VGA cards (libpciaccess doesn't know about
the alpha specific ways of mapping the PCI space),
only XRender is broken on TGA cards.
|
|
ok matthieu@
|
|
|
