Matthieu Herrb aac28e162e fix for ZDI-11426 ...

Avoid leaking un-initalized memory to clients by zeroing the
whole pixmap on initial allocation.

This vulnerability was discovered by:
Jan-Niklas Sohn working with Trend Micro Zero Day Initiative

Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>

2020-07-31 14:51:23 +00:00

..

.gitignore

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

atom.c

atom: make FreeAtom static

2015-07-08 16:41:29 -04:00

buildatoms

…

BuiltInAtoms

…

colormap.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

cursor.c

dix: Remove -fn and -fc options to set default text/cursor fonts

2019-10-30 16:17:04 +00:00

devices.c

include: Remove now-empty site.h

2019-10-30 16:17:04 +00:00

dispatch.c

xserver/output: rename some badly named variables/APIs.

2020-07-10 06:17:44 +10:00

dispatch.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

dixfonts.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

dixutils.c

os: Don't crash in AttendClient if the client is gone

2019-11-19 10:15:05 -08:00

enterleave.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

enterleave.h

dix: Unexport various implementation details

2015-07-08 16:40:57 -04:00

eventconvert.c

Use ARRAY_SIZE all over the tree

2017-10-30 13:45:20 -04:00

events.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

extension.c

dix: Allow an extension to disable itself

2018-04-24 14:36:04 -04:00

gc.c

Use ARRAY_SIZE all over the tree

2017-10-30 13:45:20 -04:00

getevents.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

globals.c

include: Remove now-empty site.h

2019-10-30 16:17:04 +00:00

glyphcurs.c

Let calloc handle multiplication

2015-04-21 16:57:07 -07:00

grabs.c

Convert dix/* to new *allocarray functions

2015-04-21 16:57:08 -07:00

initatoms.c

…

inpututils.c

dix: Remove LegalModifier()

2018-09-28 16:25:17 -04:00

main.c

include: Remove now-empty site.h

2019-10-30 16:17:04 +00:00

Makefile.am

dtrace: Move Xserver.d from dix/ to include/

2019-08-27 17:38:54 -04:00

meson.build

meson: Add dtrace support

2019-08-27 17:38:59 -04:00

pixmap.c

fix for ZDI-11426

2020-07-31 14:51:23 +00:00

privates.c

dix: Fix undefined memset in _dixInitScreenPrivates

2019-10-15 14:06:50 -04:00

property.c

dix: Add a callback chain for window property state change

2017-02-23 13:30:11 -05:00

protocol.txt

protocol.txt: add GLX req. 35 - SetClientInfo2ARB

2018-02-27 13:08:35 -05:00

ptrveloc.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

region.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

registry.c

Build required portions of registry.c automatically [v2]

2014-09-18 15:29:29 -07:00

resource.c

dix: Fix undefined shift in HashResourceID

2019-10-15 14:06:21 -04:00

selection.c

dix: Push UpdateCurrentTimeIf down out of the main loop

2016-05-04 10:58:01 -04:00

stubmain.c

Allow DDX to provide a main()

2013-07-23 23:56:58 +01:00

swaprep.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

swapreq.c

dix: Disallow GenericEvent in SendEvent request.

2017-06-19 11:58:50 +10:00

tables.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

touch.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

window.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00