Matthieu Herrb da15c74139 LogFilePrep: add a comment to the unsafe format string. ...

CVE-2018-14665 also made it possible to exploit this to access
memory. With -logfile forbidden when running with elevated privileges
this is no longer an issue.

Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Adam Jackson <ajax@redhat.com>
(cherry picked from commit 248d164eae)

2018-10-25 09:18:06 -04:00

..

.gitignore

…

access.c

os: Fix strtok/free crash in ComputeLocalClient

2017-12-13 09:54:14 -05:00

auth.c

Use ARRAY_SIZE all over the tree

2017-10-30 13:45:20 -04:00

backtrace.c

os: avoid uninitialized offsets in backtrace

2018-02-19 13:12:18 -05:00

busfault.c

os: Fix iteration over busfaults

2017-02-23 09:20:48 +10:00

client.c

DetermineClientCmd: try using /proc/pid/cmdline on Solaris too

2017-02-14 11:33:47 -05:00

connection.c

os: Set oc->fd to -1 when connection is closed

2017-06-13 09:56:44 -04:00

inputthread.c

os/inputthread: Force unlock when stopping thread.

2018-01-24 16:27:31 -05:00

io.c

os: Define {ReadFdFrom,WriteFdTo}Client unconditionally

2018-03-08 14:12:36 -05:00

log.c

LogFilePrep: add a comment to the unsafe format string.

2018-10-25 09:18:06 -04:00

Makefile.am

os,dix: Depend custom libs on libs, not objects

2017-01-02 12:45:28 -05:00

meson.build

meson: ensure the libc has RPC functions when secure-rpc is enabled

2018-08-01 11:01:37 -04:00

mitauth.c

os: make MitGenerateCookie() independent of XCSECURITY

2017-08-22 10:59:40 -04:00

oscolor.c

Use ARRAY_SIZE all over the tree

2017-10-30 13:45:20 -04:00

osdep.h

os: Remove mffs()

2017-11-06 17:22:46 -05:00

osinit.c

os: Make OsSignalHandler ask for core dumps for signo != SIGQUIT

2017-12-13 11:11:42 -05:00

ospoll.c

os: Add epoll-like port implementation for Solaris

2017-12-13 11:19:09 -05:00

ospoll.h

os: Add ospoll interface [v2]

2016-07-21 15:04:47 -04:00

reallocarray.c

Import reallocarray() from OpenBSD

2015-04-21 16:57:08 -07:00

rpcauth.c

auth: remove AuthToIDFunc and associated functions. Not used anymore.

2017-02-28 14:15:19 -05:00

strcasecmp.c

…

strcasestr.c

…

strlcat.c

…

strlcpy.c

…

strndup.c

os: Ensure <dix-config.h> is included in strndup.c

2013-02-14 09:20:46 -08:00

timingsafe_memcmp.c

timingsafe_memcmp: Fix meson build

2017-05-10 10:56:16 -04:00

utils.c

os: use PrivsElevated instead of a manual check

2018-03-21 10:58:40 -04:00

WaitFor.c

os: Recompute whether any clients are ready after check_timers()

2018-08-01 11:01:37 -04:00

xdmauth.c

auth: remove AuthToIDFunc and associated functions. Not used anymore.

2017-02-28 14:15:19 -05:00

xdmcp.c

os/xdmcp: Don't create a new socket in XdmcpReset()

2018-10-05 09:14:18 +02:00

xprintf.c

os/xprintf: add Xvscnprintf and Xscnprintf

2012-05-03 14:59:23 +10:00

xserver_poll.c

os: Add poll emulation for mingw [v2]

2016-07-19 11:08:21 -07:00

xsha1.c

os/xsha1.c: Add license and copyright attribution.

2015-01-02 13:39:52 -08:00

xstrans.c

Clean up a couple of warnings in os/

2013-10-31 16:58:12 -07:00