Povilas Kanapickas 6c4c530107 Xext: Fix out of bounds access in SProcScreenSaverSuspend() ...

ZDI-CAN-14951, CVE-2021-4010

This vulnerability was discovered and the fix was suggested by:
Jan-Niklas Sohn working with Trend Micro Zero Day Initiative

Signed-off-by: Povilas Kanapickas <povilas@radix.lt>

2021-12-14 15:00:02 +02:00

..

bigreq.c

…

dpms.c

Change the DPMS initialization to be conditional on not set from config

2018-06-26 17:14:34 -07:00

dpmsproc.h

dpms: Consolidate a bunch of stuff into Xext/dpms.c

2017-03-27 15:59:47 -04:00

geext.c

More missing version checks in SProcs

2021-08-08 12:43:01 +00:00

geext.h

…

geint.h

…

hashtable.c

dix: Fix undefined shift in ht_generic_hash

2019-10-15 14:06:30 -04:00

hashtable.h

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

meson.build

meson: hide C API if Xorg is disabled (like autotools)

2021-03-11 00:22:36 +00:00

panoramiX.c

Xext: dynamically allocate the PanoramiXDepths[j].vids array

2018-07-19 11:52:14 +10:00

panoramiX.h

…

panoramiXh.h

…

panoramiXprocs.c

dix: Call SourceValidate before GetImage

2019-10-30 16:26:01 +00:00

panoramiXsrv.h

…

panoramiXSwap.c

dispatch: Mark swapped dispatch as _X_COLD

2017-03-01 10:16:20 -05:00

saver.c

Xext: Fix out of bounds access in SProcScreenSaverSuspend()

2021-12-14 15:00:02 +02:00

security.c

dispatch: Mark swapped dispatch as _X_COLD

2017-03-01 10:16:20 -05:00

securitysrv.h

…

shape.c

dispatch: Mark swapped dispatch as _X_COLD

2017-03-01 10:16:20 -05:00

shm.c

os, shm: fcntl()'s third argument is integer, not pointer

2020-12-18 09:36:30 -05:00

shmint.h

…

sleepuntil.c

os: Don't crash in AttendClient if the client is gone

2019-11-19 10:15:05 -08:00

sleepuntil.h

…

sync.c

xsync: Add resource inside of SyncCreate, export SyncCreate

2019-04-17 14:01:17 -07:00

syncsdk.h

xsync: Add resource inside of SyncCreate, export SyncCreate

2019-04-17 14:01:17 -07:00

syncsrv.h

sync: Convert from "CARD64" to int64_t.

2017-09-20 13:19:27 -04:00

vidmode.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

xace.c

…

xace.h

…

xacestr.h

…

xcmisc.c

dispatch: Mark swapped dispatch as _X_COLD

2017-03-01 10:16:20 -05:00

xf86bigfont.c

Drop workaround for pre-glibc linux

2017-05-11 15:24:01 -04:00

xf86bigfontsrv.h

…

xres.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

xselinux_ext.c

selinux: Stop using security_context_t

2021-08-17 16:02:39 -04:00

xselinux_hooks.c

selinux: Stop using security_context_t

2021-08-17 16:02:39 -04:00

xselinux_label.c

selinux: Stop using security_context_t

2021-08-17 16:02:39 -04:00

xselinux.h

…

xselinuxint.h

selinux: Stop using security_context_t

2021-08-17 16:02:39 -04:00

xtest.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

xvdisp.c

Unvalidated lengths

2017-10-10 23:33:34 +02:00

xvdisp.h

…

xvdix.h

…

xvmain.c

Fix spelling/wording issues

2020-07-05 13:07:33 -07:00

xvmc.c

dispatch: Mark swapped dispatch as _X_COLD

2017-03-01 10:16:20 -05:00

xvmcext.h

…