Commit Graph

43 Commits

Author SHA1 Message Date
matthieu
20a75c6d0f Update to libX11 1.6.4 2016-11-03 10:21:30 +00:00
matthieu
4c3f151ece Remove stale files 2016-11-03 10:19:11 +00:00
matthieu
fd18c20e72 regen 2016-10-11 22:14:30 +00:00
natano
6c14b73344 ks_tables.h is always considered out of date due to the forced rebuild
of the makekeys util. This means it's also rebuilt during install. First
as root during build, later by the BUILDUSER during release, which won't
be able to rewrite it, because it's now owned by root. With this result:

	override rw-r--r--  root/wheel for ks_tables.h?


One step closer towards noperm release builds for xenocara.

ok matthieu
2016-10-08 21:51:47 +00:00
matthieu
89e55bbf5a Validation of server responses in XGetImage()
Check if enough bytes were received for specified image type and
geometry. Otherwise GetPixel and other functions could trigger an
out of boundary read later on.
From Tobias Stoeckmann / X.Org security advisory Oct 4, 2016
2016-10-04 14:58:26 +00:00
matthieu
bd2560e2ec The validation of server responses avoids out of boundary accesses.
From Tobias Stoeckmann / Xorg Securiry adrvisory Oct 4, 2016.
2016-10-04 14:56:37 +00:00
matthieu
8252bb00ee update to libX11 1.6.3 2015-04-06 20:57:55 +00:00
matthieu
8c1effea43 Update to libX11 1.6.2. No API change. 2013-09-28 17:03:13 +00:00
matthieu
ce84febd9d Update to libX11 1.6.1. 2013-08-26 19:57:22 +00:00
matthieu
acee5d3c07 Repair guenther's damage that I didn't ok. 2013-08-13 18:52:10 +00:00
guenther
426afb6384 Bump major on libX11-xcb to match the 64bit time_t change 2013-08-13 08:01:13 +00:00
matthieu
4b8a5f471a Update to libX11 1.6.0 2013-06-04 03:19:34 +00:00
matthieu
9573aeb427 Update to libX11 1.5.99.902 aka 1.6rc2 2013-05-31 21:17:09 +00:00
matthieu
52f6d0ba20 Merge upstream fixes for several X libs vulnerabilities
discovered by Ilja van Sprundel.

CVE-2013-1981 X.org libX11 1.5.99.901 (1.6 RC1) integer overflows
CVE-2013-1982 X.org libXext 1.3.1 integer overflows
CVE-2013-1983 X.org libXfixes 5.0 integer overflows
CVE-2013-1984 X.org libXi 1.7.1 integer overflows
CVE-2013-1985 X.org libXinerama 1.1.2 integer overflows
CVE-2013-1986 X.org libXrandr 1.4.0 integer overflows
CVE-2013-1987 X.org libXrender 0.9.7 integer overflows
CVE-2013-1988 X.org libXRes 1.0.6 integer overflows
CVE-2013-1989 X.org libXv 1.0.7 integer overflows
CVE-2013-1990 X.org libXvMC 1.0.7 integer overflows
CVE-2013-1991 X.org libXxf86dga 1.1.3 integer overflows
CVE-2013-1992 X.org libdmx 1.1.2 integer overflows
CVE-2013-1994 X.org libchromeXvMC & libchromeXvMCPro in openChrome
0.3.2 integer overflows
CVE-2013-1995 X.org libXi 1.7.1 sign extension issues
CVE-2013-1996 X.org libFS 1.0.4 sign extension issues
CVE-2013-1997 X.org libX11 1.5.99.901 (1.6 RC1) buffer overflows
CVE-2013-1998 X.org libXi 1.7.1 buffer overflows
CVE-2013-1999 X.org libXvMC 1.0.7 buffer overflows
CVE-2013-2000 X.org libXxf86dga 1.1.3 buffer overflows
CVE-2013-2001 X.org libXxf86vm 1.1.2 buffer overflows
CVE-2013-2002 X.org libXt 1.1.3 buffer overflows
CVE-2013-2003 X.org libXcursor 1.1.13 integer overflows
CVE-2013-2004 X.org libX11 1.5.99.901 (1.6 RC1) unbounded recursion
CVE-2013-2005 X.org libXt 1.1.3 memory corruption
CVE-2013-2066 X.org libXv 1.0.7 buffer overflows
2013-05-23 22:42:07 +00:00
matthieu
f2c99c06c2 Update to libX11 1.6RC. No bump needed. 2013-04-28 16:55:55 +00:00
matthieu
be4020d279 Update to libX11 1.5.0 2012-06-11 19:18:54 +00:00
matthieu
08ecf5f3a3 Upate to libX11 1.5rc1. Tested by krw@, mpi@, shadchin@. 2012-03-27 19:19:37 +00:00
matthieu
f476ec5831 Fix _Xthr_once_stub_() to call the init routine for each different id.
With tweaks from and ok ariane@
2011-09-19 20:21:37 +00:00
matthieu
5577d754a3 Update to libX11 1.4.4. Tested by ajacoutot@, shadchin@. 2011-08-27 15:34:14 +00:00
matthieu
8cc0378bfd Update to libX11 1.4.3 which was released during the 1.4.2 tests.
Mostly churn in the doc build system, which is disabled on Xenocara
for now.
2011-05-30 20:52:47 +00:00
matthieu
857c658f08 Update to libx11 1.4.2. Tested by ajacoutot@, jasper@ krw@, landry@,
shadchin@ on various architectures.
Bump major.
2011-05-30 19:19:29 +00:00
matthieu
502b62f99f Update to libX11 1.3.6.
Tested by ajacoutot@, jasper@ and krw@.
2010-10-05 19:50:57 +00:00
matthieu
6c940574a9 Update to libX11 1.3.5 2010-09-04 10:33:11 +00:00
matthieu
aa3c9f9344 Update to libX11 1.3.3. Tested on a bulk ports build by naddy@. 2010-05-18 19:37:28 +00:00
matthieu
8bb5fd8a8f update to libX11 1.2.1 2009-05-03 12:59:09 +00:00
matthieu
8d46f8e4f0 Update to libX11 1.1.4. I've carefully checked that there's no API/ABI
change in this version. Only small bug fixes, manual page fixes and
some more data in the i18n tables.
2008-06-11 20:55:41 +00:00
matthieu
f01cdd7229 - actually zero the memory returned by realloc().
- set the return value for the pthread_once() stub.
2008-06-10 22:01:31 +00:00
oga
eb88ad3f01 Include stdlib.h so we have the prototype for realloc. This means that we don't
assume realloc returns an int. This causes problems...

This took me hours to find.

Ok matthieu@.
2008-06-10 21:24:16 +00:00
matthieu
42f2fadde6 pthread_key_create(3) explicitely says that the value associated
with a new key is NULL. So set the allocated memory to zero.
2008-04-17 20:25:05 +00:00
matthieu
08aaed925b - get rid of recalloc() that got introduced here.
- while there fix the computation of the new allocated size.
Issue reported by naddy@, ok naddy@.
2008-03-30 15:54:33 +00:00
naddy
e4bcb354a2 Fix segfaults if you use XDM-AUTHORIZATION-1 authorization keys for
remote X11 clients over IPv6.  ok matthieu@
2008-03-18 15:50:38 +00:00
matthieu
bfba922c91 Re-enable pthread support in libGL, by providing proper weak stubs in
libX11 (together with other pthread stubs, already there for libX11).
ok kurt@, art@, kettenis@
2007-11-26 15:10:19 +00:00
matthieu
5f86a80368 Merge libX11 1.1.3
bump major
2007-09-30 10:35:10 +00:00
matthieu
a72daf0a1a libX11 1.1.3 2007-09-30 10:11:57 +00:00
todd
d943586aca libX11 CVE-2007-1667
Multiple integer overflows in the XGetPixel() and XInitImage functions
in ImUtil.c

from matthieu@
2007-04-04 02:52:41 +00:00
matthieu
77cb7f251b Revert local debug stuff that wasn't meant to be committed. 2007-03-25 13:22:40 +00:00
matthieu
00a847b3f8 regen with libtool 1.5.22p9 2007-03-25 13:02:54 +00:00
matthieu
6637a9a36e regen with automake 1.9.6p2 2007-03-18 22:29:12 +00:00
matthieu
5954aa6578 regen 2007-03-15 23:28:08 +00:00
matthieu
1e6e3c3517 regen 2006-12-16 17:01:57 +00:00
matthieu
7a183623da Import libX11 1.1.1 from X.Org 7.2RC3 2006-12-16 16:39:39 +00:00
matthieu
e5ca1d526f regen with OpenBSD autotools 2006-11-26 13:42:42 +00:00
matthieu
8ef0df6aa5 import from X.Org 7.2RC2 2006-11-25 16:33:55 +00:00