Adam Jackson e883c170c1 glx: Pass remaining request length into ->varsize (v2) [CVE-2014-8098 8/8] ...

v2: Handle more multiplies in indirect_reqsize.c (Julien Cristau)

Reviewed-by: Julien Cristau <jcristau@debian.org>
Reviewed-by: Michal Srb <msrb@suse.com>
Reviewed-by: Andy Ritger <aritger@nvidia.com>
Signed-off-by: Adam Jackson <ajax@redhat.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

2014-12-08 18:09:50 -08:00

..

clientinfo.c

glx: Request length checks for SetClientInfoARB [CVE-2014-8098 5/8]

2014-12-08 18:09:50 -08:00

createcontext.c

Merge remote-tracking branch 'idr/glx-float-fbconfig'

2013-10-29 09:37:30 -07:00

extension_string.c

glx: Enable GLX_ARB_fbconfig_float for DRI2 drivers

2013-10-24 11:48:04 -07:00

extension_string.h

glx: Enable GLX_ARB_fbconfig_float for DRI2 drivers

2013-10-24 11:48:04 -07:00

glxbyteorder.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

glxcmds.c

glx: Pass remaining request length into ->varsize (v2) [CVE-2014-8098 8/8]

2014-12-08 18:09:50 -08:00

glxcmdsswap.c

glx: Top-level length checking for swapped VendorPrivate requests [CVE-2014-8098 4/8]

2014-12-08 18:09:50 -08:00

glxcontext.h

glx: Fix memory leak in context garbage collection (v2)

2013-10-29 10:30:43 -04:00

glxdrawable.h

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

glxdri2.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

glxdricommon.c

glx: Clear new FBConfig attributes to 0 by default.

2014-03-10 13:57:21 -07:00

glxdricommon.h

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

glxdriswrast.c

glx: Fix 'y ' value in swrastGetDrawableInfo()

2014-09-11 17:51:12 -07:00

glxext.c

glx: Fix crash when a client exits without deleting GL contexts

2014-12-05 16:41:49 +00:00

glxext.h

glx: Fix crash when a client exits without deleting GL contexts

2014-12-05 16:41:49 +00:00

glxscreens.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

glxscreens.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

glxserver.h

glx: Pass remaining request length into ->varsize (v2) [CVE-2014-8098 8/8]

2014-12-08 18:09:50 -08:00

glxutil.h

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

indirect_dispatch_swap.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_dispatch.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_dispatch.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_program.c

glx: Length-checking for non-generated vendor private requests [CVE-2014-8098 6/8]

2014-12-08 18:09:50 -08:00

indirect_reqsize.c

glx: Pass remaining request length into ->varsize (v2) [CVE-2014-8098 8/8]

2014-12-08 18:09:50 -08:00

indirect_reqsize.h

glx: Pass remaining request length into ->varsize (v2) [CVE-2014-8098 8/8]

2014-12-08 18:09:50 -08:00

indirect_size_get.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_size_get.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_size.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_table.c

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_table.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

indirect_texture_compression.c

glx: Length checking for non-generated single requests (v2) [CVE-2014-8098 7/8]

2014-12-08 18:09:50 -08:00

indirect_util.c

glx: Additional paranoia in __glXGetAnswerBuffer / __GLX_GET_ANSWER_BUFFER (v2) [CVE-2014-8093 3/6]

2014-12-08 18:09:49 -08:00

indirect_util.h

Drop trailing whitespaces

2014-11-12 10:25:00 +10:00

Makefile.am

glx: Remove function stubs

2013-12-10 08:03:22 -08:00

render2.c

glx: Convert non-generated function pointer thunking

2013-12-10 08:02:42 -08:00

render2swap.c

glx: Convert non-generated function pointer thunking

2013-12-10 08:02:42 -08:00

renderpix.c

glx: convert to direct GL dispatch (v2)

2013-10-29 12:29:16 -04:00

renderpixswap.c

glx: convert to direct GL dispatch (v2)

2013-10-29 12:29:16 -04:00

rensize.c

glx: Pass remaining request length into ->varsize (v2) [CVE-2014-8098 8/8]

2014-12-08 18:09:50 -08:00

single2.c

glx: Length checking for non-generated single requests (v2) [CVE-2014-8098 7/8]

2014-12-08 18:09:50 -08:00

single2swap.c

glx: Length checking for non-generated single requests (v2) [CVE-2014-8098 7/8]

2014-12-08 18:09:50 -08:00

singlepix.c

glx: Length checking for non-generated single requests (v2) [CVE-2014-8098 7/8]

2014-12-08 18:09:50 -08:00

singlepixswap.c

glx: Length checking for non-generated single requests (v2) [CVE-2014-8098 7/8]

2014-12-08 18:09:50 -08:00

singlesize.c

glx: convert to direct GL dispatch (v2)

2013-10-29 12:29:16 -04:00

singlesize.h

Introduce a consistent coding style

2012-03-21 13:54:42 -07:00

swap_interval.c

glx: Length-checking for non-generated vendor private requests [CVE-2014-8098 6/8]

2014-12-08 18:09:50 -08:00

unpack.h

glx: Additional paranoia in __glXGetAnswerBuffer / __GLX_GET_ANSWER_BUFFER (v2) [CVE-2014-8093 3/6]

2014-12-08 18:09:49 -08:00

xfont.c

glx: convert to direct GL dispatch (v2)

2013-10-29 12:29:16 -04:00