Matthieu Herrb 248d164eae LogFilePrep: add a comment to the unsafe format string. ...

CVE-2018-14665 also made it possible to exploit this to access
memory. With -logfile forbidden when running with elevated privileges
this is no longer an issue.

Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Adam Jackson <ajax@redhat.com>

2018-10-25 09:17:11 -04:00

..

.gitignore

dix and os: gitignore dix.O and os.O

2011-09-23 17:14:47 -07:00

access.c

os: Fix strtok/free crash in ComputeLocalClient

2017-12-13 09:54:14 -05:00

auth.c

Use ARRAY_SIZE all over the tree

2017-10-30 13:45:20 -04:00

backtrace.c

os: avoid uninitialized offsets in backtrace

2018-02-19 13:12:18 -05:00

busfault.c

os: Fix iteration over busfaults

2017-02-23 09:20:48 +10:00

client.c

DetermineClientCmd: try using /proc/pid/cmdline on Solaris too

2017-02-14 11:33:47 -05:00

connection.c

dix: Remove MaxClients

2018-09-12 19:31:07 +00:00

inputthread.c

os/inputthread: Force unlock when stopping thread.

2018-01-24 16:27:31 -05:00

io.c

os: Define {ReadFdFrom,WriteFdTo}Client unconditionally

2018-03-08 14:12:36 -05:00

log.c

LogFilePrep: add a comment to the unsafe format string.

2018-10-25 09:17:11 -04:00

Makefile.am

os,dix: Depend custom libs on libs, not objects

2017-01-02 12:45:28 -05:00

meson.build

meson: Get close to parity with autotools for CLIENTIDS tracking.

2018-08-09 13:42:54 -04:00

mitauth.c

os: make MitGenerateCookie() independent of XCSECURITY

2017-08-22 10:59:40 -04:00

oscolor.c

Use ARRAY_SIZE all over the tree

2017-10-30 13:45:20 -04:00

osdep.h

os: Remove mffs()

2017-11-06 17:22:46 -05:00

osinit.c

os: Make OsSignalHandler ask for core dumps for signo != SIGQUIT

2017-12-13 11:11:42 -05:00

ospoll.c

os: Add epoll-like port implementation for Solaris

2017-12-13 11:19:09 -05:00

ospoll.h

os: Add ospoll interface [v2]

2016-07-21 15:04:47 -04:00

reallocarray.c

Import reallocarray() from OpenBSD

2015-04-21 16:57:08 -07:00

rpcauth.c

auth: remove AuthToIDFunc and associated functions. Not used anymore.

2017-02-28 14:15:19 -05:00

strcasecmp.c

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

strcasestr.c

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

strlcat.c

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

strlcpy.c

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

strndup.c

os: Ensure <dix-config.h> is included in strndup.c

2013-02-14 09:20:46 -08:00

timingsafe_memcmp.c

timingsafe_memcmp: Fix meson build

2017-05-10 10:56:16 -04:00

utils.c

dix: Remove the magic WhenMapped backing store hack

2018-10-23 18:37:46 +00:00

WaitFor.c

os: Recompute whether any clients are ready after check_timers()

2018-06-26 17:03:32 -07:00

xdmauth.c

auth: remove AuthToIDFunc and associated functions. Not used anymore.

2017-02-28 14:15:19 -05:00

xdmcp.c

os/xdmcp: Fix binding of ipv6 source address

2018-10-24 19:29:29 +00:00

xprintf.c

os/xprintf: add Xvscnprintf and Xscnprintf

2012-05-03 14:59:23 +10:00

xserver_poll.c

os: Add poll emulation for mingw [v2]

2016-07-19 11:08:21 -07:00

xsha1.c

os/xsha1.c: Add license and copyright attribution.

2015-01-02 13:39:52 -08:00

xstrans.c

Clean up a couple of warnings in os/

2013-10-31 16:58:12 -07:00