Branch :
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
| 1a66cad3 | 2017-12-08 15:01:59 | Update to xserver 1.19.5. Tested by bru@, jsg@ and others | ||
| a6a6fd0c | 2017-12-05 20:56:26 | Use ws as default driver for touchpads. ok matthieu@ | ||
| f51fea01 | 2017-10-14 09:35:14 | MFC: Unvalidated extra length in ProcEstablishConnection (CVE-2017-12176) | ||
| 18698290 | 2017-10-14 09:33:48 | MFC: dbe: Unvalidated variable-length request in ProcDbeGetVisualInfo (CVE-2017-12177) v2: Protect against integer overflow (Alan Coopersmith) | ||
| 394a8aee | 2017-10-14 09:32:30 | MFC: Xi: fix wrong extra length check in ProcXIChangeHierarchy (CVE-2017-12178) | ||
| 74d10c41 | 2017-10-14 09:30:50 | MFC: Xi: integer overflow and unvalidated length in (S)ProcXIBarrierReleasePointer [jcristau: originally this patch fixed the same issue as commit 211e05ac85 "Xi: Test exact size of XIBarrierReleasePointer", with the addition of these checks] This addresses CVE-2017-12179 | ||
| 792e23cc | 2017-10-14 09:29:01 | MFC: Xi: Test exact size of XIBarrierReleasePointer Otherwise a client can send any value of num_barriers and cause reading or swapping of values on heap behind the receive buffer. | ||
| 515a707d | 2017-10-14 09:24:30 | MFC: hw/xfree86: unvalidated lengths This addresses: CVE-2017-12180 in XFree86-VidModeExtension CVE-2017-12181 in XFree86-DGA CVE-2017-12182 in XFree86-DRI | ||
| d6248304 | 2017-10-14 09:22:49 | MFC: xfixes: unvalidated lengths (CVE-2017-12183) v2: Use before swap (Jeremy Huddleston Sequoia) v3: Fix wrong XFixesCopyRegion checks (Alan Coopersmith) | ||
| 3b3c79f0 | 2017-10-14 09:20:42 | MFC: Unvalidated lengths v2: Add overflow check and remove unnecessary check (Julien Cristau) This addresses: CVE-2017-12184 in XINERAMA CVE-2017-12185 in MIT-SCREEN-SAVER CVE-2017-12186 in X-Resource CVE-2017-12187 in RENDER | ||
| fe08a081 | 2017-10-14 09:17:40 | MFC: os: Make sure big requests have sufficient length. A client can send a big request where the 32B "length" field has value 0. When the big request header is removed and the length corrected, the value will underflow to 0xFFFFFFFF. Functions processing the request later will think that the client sent much more data and may touch memory beyond the receive buffer. | ||
| 9b9efb1b | 2017-10-14 09:15:11 | MFC: xkb: Handle xkb formated string output safely (CVE-2017-13723) Generating strings for XKB data used a single shared static buffer, which offered several opportunities for errors. Use a ring of resizable buffers instead, to avoid problems when strings end up longer than anticipated. | ||
| fd77a349 | 2017-10-14 09:12:44 | MFC: xkb: Escape non-printable characters correctly XkbStringText escapes non-printable characters using octal numbers. Such escape sequence would be at most 5 characters long ("\0123"), so it reserves 5 bytes in the buffer. Due to char->unsigned int conversion, it would print much longer string for negative numbers. | ||
| 2f2a50b9 | 2017-10-14 09:06:06 | MFC: Xext/shm: Validate shmseg resource id (CVE-2017-13721) Otherwise it can belong to a non-existing client and abort X server with FatalError "client not in use", or overwrite existing segment of another existing client. | ||
| c6ab4990 | 2017-09-25 15:05:57 | Force Intel Ironlake chipsets to use the xf86-video-intel driver. stsp@ reported that modesetting(4) has been reported unreliable on his laptop, while intel(4) works. XXXX to be removed after 6.2 to figure out and fix the issue. ok kettenis@, also discussed briefly with deraadt@ during EuroBSDCon. | ||
| b8da768e | 2017-08-07 19:17:56 | Disable SSE optimizations on i386/amd64 for SlowBcopy. It is supposed to be slow, and when such instructions are used to copy data from/to mapped video memory, some hypervisors (e.g. KVM, Microsoft Hyper-V) can generate SIGILL or SIGBUS exceptions, causing Xorg to crash. Bug report to OpenBSD by Max Parmer, fix from FreeBSD (Dimitry Andric) via kettenis@ ok kettenis@ | ||
| 38475bb3 | 2017-08-07 12:30:34 | Create on OpenBSD-specific version of listPossibleVideoDrivers() that takes care of autoconfiguration based on the information returned by the WSDISPLAYIO_GTYPE ioctl of the console FD. This should fix selection of wsfb on loongson and sgi when using a non-KMS kernel driver. ok matthieu@, jsg@ | ||
| d74e2cb1 | 2017-07-14 11:38:05 | Use the modesetting driver by default on 4th generation Intel Graphics and later. This matches what several Linux distros do these days as it tends to work better than the intel driver in most cases. There are some performance issues with vncviewer on at least Ivy Bridge and Haswell. But for now that regression outweighs the benefits. ok robert@, tedu@, sthen@ | ||
| 11bfbfff | 2017-07-12 20:08:07 | Add code to update the value of the RandR "Backlight" property based on the KMS connector property of the same name if such a property is present. ok matthieu@ | ||
| 1862f548 | 2017-07-07 06:22:19 | Merge upstream fixes to the X event swapping code. (CVE-2017-10971 and CVE-2017-10972). | ||
| 55a8e552 | 2017-05-21 13:18:29 | Make X work with radeondrm(4) hardware on loongson. OK jsg@ | ||
| f372d76f | 2017-03-07 03:40:33 | make xserver build on arm64 ok matthieu@ | ||
| 2666ed3f | 2017-03-01 19:22:36 | Fix arc4random_buf(3) detection. Noticed by Eric Engestrom on the xorg-devel list. Thanks | ||
| da8f098a | 2017-02-28 23:05:46 | Oops, in previous commit I forgot to remove the actual implementation of the unused *ToID functions(). Spotted by Adam Jackson on xorg-devel list. Thanks. | ||
| 5d64bd18 | 2017-02-28 18:33:44 | regen | ||
| e087a236 | 2017-02-28 18:32:53 | auth: remove AuthToIDFunc and associated functions. Not used anymore. And the current code for MitToId has a use-after-free() issue. Advisory X41-2017-001: Multiple Vulnerabilities in X.Org | ||
| eb3d2477 | 2017-02-28 18:27:40 | MFC: Use arc4random_buf(3) if available to generate cookies. Advisory X41-2017-001: Multiple Vulnerabilities in X.Org. | ||
| 9ddca5b5 | 2017-02-28 18:24:48 | MFC: Use timingsafe_memcmp() to compare MIT-MAGIC-COOKIES Advisory X41-2017-001: Multiple Vulnerabilities in X.Org. | ||
| fd18c20e | 2016-10-11 22:14:30 | regen | ||
| 13cbbbd6 | 2016-10-04 19:48:48 | ignore chown error (for systems which don't install a Xserver) | ||
| 8587a95e | 2016-10-02 17:21:29 | fix the ownership of the link /usr/X11R6/bin/X -> Xorg | ||
| b9d0c0fb | 2016-09-12 21:57:14 | Fix a bunch of gcc warnings. - constify name field - rename devname -> devnam - replace deprecated Xprintf() with asprintf() | ||
| 595a0e50 | 2016-09-12 21:46:25 | sys/select.h -> sys/time.h | ||
| d2533042 | 2016-09-12 21:44:30 | Fix build after headers cleanup. include wscons headers after sys/ioct.h and sys/select.h with deraadt@ and kettenis@ | ||
| 8113144b | 2016-09-03 14:58:02 | Remove zaurus keyboard model ok matthieu@ | ||
| ee65902d | 2016-08-13 14:05:23 | Kill remaining HP300 bits | ||
| 6e1bcfb3 | 2016-08-09 18:59:50 | Update to xserver 1.18.4 tested by krw@ and dcoppa@ ok dcoppa@ | ||
| 185312ce | 2016-08-03 19:31:23 | xserver: fix an off-by-one error that lead to asprintf("%s", NULL) reported by deraadt@, fix reviewed in X.Org by Keith Packard. | ||
| 7d876864 | 2016-07-30 12:18:35 | Merge the build of Xephyr in the main xserver build. Recent X server doesn't require to build the DIX with different options for xfree86 and kdrive. Tested for beeing a no-op on m88k by Kenji Aoyama. Thanks | ||
| e927c03e | 2016-05-29 12:02:34 | Update to xserver 1.18.3. Tested by shadchin@ and naddy@. Note that indirect GLX is now disbled by default. | ||
| 5b07d034 | 2016-05-12 07:19:50 | No more hppa64 | ||
| 6b14cdf9 | 2016-04-24 17:21:55 | Fix white space/indentation to match X.Org style. | ||
| a009af0b | 2016-04-24 17:20:04 | Fall back to /dev/ttyC0 when the console device is not a wsdisplay(4) Problem noticed by sthen@. | ||
| a096d7ad | 2016-04-02 16:57:58 | Don't build the PCVT console backend anymore. | ||
| 3b5e851d | 2016-04-02 14:25:10 | Implement VT switching (based on the USL compat interface) in the wscons console backend and use it by default. ok kettenis@ | ||
| e44b23d2 | 2016-03-27 18:48:41 | Make alpha_video.c build in recent X server. Completely broken on VGA cards (libpciaccess doesn't know about the alpha specific ways of mapping the PCI space), only XRender is broken on TGA cards. | ||
| 27f67406 | 2016-03-11 13:09:42 | Remove support vax and XENOCARA_HAVE_SHARED_LIBS scaffolding. ok matthieu@ | ||
| ab587bce | 2016-03-06 17:11:46 | Cleanup gcc warnings and function prototypes. | ||
| 926017f7 | 2016-03-06 16:09:27 | Fix typo introduced 5.5 years ago. Note: this changes the #if test result, but the now #ifdef out code has no effect. | ||
| 4a17b803 | 2016-02-20 10:58:10 | No more aviion | ||
| f1584286 | 2016-02-07 09:51:01 | solbourne was removed | ||
| ca4d0512 | 2015-12-29 18:47:21 | Detect keyboard configuration by masking bits, not equality checks. Fixes the case where a kbd(8) setting has multiple bits set (e.g., us.dvorak.swapctrlcaps). Bug reported by Sevan Janiyan. ok shadchin@ matthieu@ | ||
| ed4591c1 | 2015-12-21 08:37:11 | On Broadwell, default to using the modesetting driver. Our KMS support on Broadwell is still a bit weak and the modesetting driver seems to work better than the intel driver, while still providing 3D acceleration and video playback support. ok phessler@, matthieu@, jsg@ | ||
| c7a6143b | 2015-12-01 21:20:21 | Enable glamor on architectures where we have OpenGL. ok jsg@, matthieu@ | ||
| 2e2a8984 | 2015-12-01 21:18:47 | Remove a check for DRI3 in glamor_name_from_pixmap(). This makes DRI2 work on OpenBSD where we don't have support for DRI3 yet. ok jsg@, matthieu@ | ||
| bfcc545c | 2015-12-01 21:17:49 | Use an ARGB8888 based texture even when DRI3 isn't enabled. This achieves the same effect as a change that was recently made upstream. The code changed significantly in the meantime. ok jsg@, matthieu@ | ||
| e6977614 | 2015-12-01 21:13:48 | Call miSyncSetup() if we don't call miSyncShmScreenInit() because HAVE_XSHMFENCE isn't defined. This makes sure the relevant "private key" gets installed such that we don't hit a fatal assert later. ok jsg@, matthieu@ | ||
| 184a9833 | 2015-11-17 10:49:57 | Pass --disable-libdrm option to configure when the machine does not support DRI. Found while building Xorg server on luna88k. "fine for now" matthieu@ | ||
| 1e036e40 | 2015-11-15 08:28:24 | Remove the -configure option. This has been broken for a loong time and no one is going to fix it. | ||
| f7d98a31 | 2015-11-11 21:07:49 | pledge(2) for the X server privileged process. ok deraadt@ | ||
| 4c6a4e1e | 2015-11-07 16:48:51 | Update to xserver 1.17.4. tested by naddy@ | ||
| f00e3078 | 2015-10-25 15:24:06 | Reduce white space diff with upstreams. No other change. | ||
| e957e255 | 2015-09-28 07:14:00 | Post xserver 1.17 cleanup | ||
| 5f3337ae | 2015-09-28 06:20:25 | Post-xserver 1.17 cleanup. | ||
| 1867e4b0 | 2015-09-28 06:00:47 | Post xserver 1.17 cleanup. Remove now unused functions. | ||
| 11ed0dd9 | 2015-09-28 05:59:26 | Update for xserver 1.17 | ||
| 7c1233b0 | 2015-09-28 05:53:20 | Patch for xserver 1.17. Missed in upgrade commit. | ||
| 86ea9f12 | 2015-09-16 19:10:19 | Update to xserver 1.17.2. tested by dcoppa@, jsg@, jasper@ & naddy@ | ||
| 0a779e42 | 2015-08-30 13:32:02 | Remove abuse of \/ which is not a slash but an italic correction; ok matthieu@, who will also push these fixes upstream (thanks). | ||
| 4d7af2a4 | 2015-08-29 17:49:14 | With the binutils got slot accounting fix, workaround it no longer needed ok miod@ | ||
| 67eafd38 | 2015-06-27 21:50:55 | Build the Xserver with large got (-xgot as(1) option) on mips; needed to accomodate the growth of recent changes. Tested on loongson. | ||
| 3e477e76 | 2015-06-20 10:03:56 | Merge from upstream: Don't listen to 'tcp' by default. Add '-listen' option. commit cc59be38b7eff52a1d003b390f2994c73ee0b3e9 Author: Keith Packard <keithp@keithp.com> Date: Fri Sep 12 11:33:48 2014 -0700 os: Don't listen to 'tcp' by default. Add '-listen' option. [v2] This disables the tcp listen socket by default. Then, it uses a new xtrans interface, TRANS(Listen), to provide a command line option to re-enable those if desired. v2: Leave unix socket enabled by default. Add configure options. Signed-off-by: Keith Packard <keithp@keithp.com> Reviewed-by: Hans de Goede <hdegoede@redhat.com> | ||
| a8994d94 | 2015-05-31 13:23:03 | Obsolete XAA includes should be gone now. | ||
| 031b04ad | 2015-05-27 15:11:12 | Simplify arm_video.c; we will never have PCI graphics on this architecture. This also makes it possible to run wsudl(4) on armv7 machines with echi(4). Tested for non-regression on zaurus by Sigi Rudzio. Thanks. | ||
| 2b01672b | 2015-04-18 10:22:11 | Bury kdriver/wscons code in the Attic. It has never worked and there is no plan to finish it. | ||
| 5b19f6d7 | 2015-02-11 20:58:46 | Update to xserver 1.16.4. Contains fix for CVE-2015-0255. ok dcoppa@ | ||
| 389048d7 | 2015-02-09 09:55:52 | Enable file descriptor passing code. ok deraadt@, matthieu@ | ||
| a77282ed | 2015-02-09 09:45:32 | Use __MAP_NOFAULT to map shared memory passed through file descriptors. This completely avoids the risk of getting killed by a signal because the backing storage isn't there. Use the __-prefixed name for now, as we might still change the name. ok deraadt@, matthieu@ | ||
| 56b31a08 | 2015-01-15 01:30:40 | Recognise the synaptics with sw buttons mouse type and set the clickpad and has_secondary_buttons properties. Initial diff from myself with additional changes from matthieu@ | ||
| 7db4642f | 2014-12-21 11:41:44 | Update to xorg-server 1.16.3. Most of the 1.16.2->1.16.3 changes are the security patches that where already there. This adds some extra fixes plus a few unrelated bug fixes. | ||
| 797ed933 | 2014-12-09 17:58:52 | Protocol handling issues in X Window System servers One year after Ilja van Sprundel, discovered and reported a large number of issues in the way the X server code base handles requests from X clients, they have been fixed. | ||
| 1cfce7c2 | 2014-11-22 08:33:45 | Update to xserver 1.16.2 | ||
| a20b025e | 2014-10-20 06:14:42 | regen | ||
| 25d68f1c | 2014-10-20 06:14:23 | OpenBSD's make now supports -include. So reduce diff with upstreams. ok kettenis@ espie@ | ||
| d1b6c6de | 2014-10-18 14:39:40 | No more /dev/agp0 | ||
| 64609bb7 | 2014-09-28 10:01:52 | white space diff redux | ||
| 4f58590a | 2014-09-27 17:52:59 | Update to xserver 1.16.1. Tested by naddy@, jsg@ & kettenis@ | ||
| cd0bdbef | 2014-09-27 17:49:46 | Update to xserver 1.16.1. Tested by naddy@, jsg@ & kettenis@ | ||
| 4f333b16 | 2014-07-11 08:13:43 | Update to xorg-server 1.15.2. bug fixes. | ||
| 3bbfe7b1 | 2014-05-02 19:27:46 | Update to xserver 1.15.1. Tested by at least ajacoutot@, dcoppa@ & jasper@ | ||
| 81a3c9ac | 2014-03-18 22:37:28 | Remove {hp300,mvme68k,mvme88k} bits. | ||
| 569a1f62 | 2014-02-26 22:29:17 | Call pci_system_init(), even if opening /dev/xf86 fails. Makes it possible to run X with machdep.allowaperture=0 on hardware supported by radeondrm(4) on macppc too. tested by landry@ ok matthieu@, deraadt@ | ||
| 66cca5a1 | 2014-02-15 15:00:28 | Fix build of (disabled) wsfb kdrive backend. | ||
| 625fe392 | 2013-12-28 16:31:18 | mac68k and mvmeppc are no longer supported. | ||
| 8742d82e | 2013-12-28 14:40:01 | Update to xserver 1.14.5 | ||
| 29c59cee | 2013-12-15 11:31:09 | Avoid timeouts of ULONG_MAX milliseconds. Stops the X server from crashing with "select returned EINVAL" messages. ok matthieu@ | ||
| 511a911d | 2013-12-08 10:53:01 | Update to xserver 1.14.4 | ||
| 63985638 | 2013-10-09 05:37:56 | Fix from upstreams for CVE-2013-4396 Use after free in Xserver handling of ImageText requests | ||
| 5ae225f3 | 2013-09-28 15:36:30 | Update to xserver 1.14.3 | ||
| 84922f95 | 2013-09-09 14:51:24 | revert a local patch to check for swrastg, LLVMpipe installs as swrast now ok mpi@ ajacoutot@ |