IABSD.fr/xenocara/xserver

Branch :


Log

Author Commit Date CI Message
1a66cad3 2017-12-08 15:01:59 Update to xserver 1.19.5. Tested by bru@, jsg@ and others
a6a6fd0c 2017-12-05 20:56:26 Use ws as default driver for touchpads. ok matthieu@
f51fea01 2017-10-14 09:35:14 MFC: Unvalidated extra length in ProcEstablishConnection (CVE-2017-12176)
18698290 2017-10-14 09:33:48 MFC: dbe: Unvalidated variable-length request in ProcDbeGetVisualInfo (CVE-2017-12177) v2: Protect against integer overflow (Alan Coopersmith)
394a8aee 2017-10-14 09:32:30 MFC: Xi: fix wrong extra length check in ProcXIChangeHierarchy (CVE-2017-12178)
74d10c41 2017-10-14 09:30:50 MFC: Xi: integer overflow and unvalidated length in (S)ProcXIBarrierReleasePointer [jcristau: originally this patch fixed the same issue as commit 211e05ac85 "Xi: Test exact size of XIBarrierReleasePointer", with the addition of these checks] This addresses CVE-2017-12179
792e23cc 2017-10-14 09:29:01 MFC: Xi: Test exact size of XIBarrierReleasePointer Otherwise a client can send any value of num_barriers and cause reading or swapping of values on heap behind the receive buffer.
515a707d 2017-10-14 09:24:30 MFC: hw/xfree86: unvalidated lengths This addresses: CVE-2017-12180 in XFree86-VidModeExtension CVE-2017-12181 in XFree86-DGA CVE-2017-12182 in XFree86-DRI
d6248304 2017-10-14 09:22:49 MFC: xfixes: unvalidated lengths (CVE-2017-12183) v2: Use before swap (Jeremy Huddleston Sequoia) v3: Fix wrong XFixesCopyRegion checks (Alan Coopersmith)
3b3c79f0 2017-10-14 09:20:42 MFC: Unvalidated lengths v2: Add overflow check and remove unnecessary check (Julien Cristau) This addresses: CVE-2017-12184 in XINERAMA CVE-2017-12185 in MIT-SCREEN-SAVER CVE-2017-12186 in X-Resource CVE-2017-12187 in RENDER
fe08a081 2017-10-14 09:17:40 MFC: os: Make sure big requests have sufficient length. A client can send a big request where the 32B "length" field has value 0. When the big request header is removed and the length corrected, the value will underflow to 0xFFFFFFFF. Functions processing the request later will think that the client sent much more data and may touch memory beyond the receive buffer.
9b9efb1b 2017-10-14 09:15:11 MFC: xkb: Handle xkb formated string output safely (CVE-2017-13723) Generating strings for XKB data used a single shared static buffer, which offered several opportunities for errors. Use a ring of resizable buffers instead, to avoid problems when strings end up longer than anticipated.
fd77a349 2017-10-14 09:12:44 MFC: xkb: Escape non-printable characters correctly XkbStringText escapes non-printable characters using octal numbers. Such escape sequence would be at most 5 characters long ("\0123"), so it reserves 5 bytes in the buffer. Due to char->unsigned int conversion, it would print much longer string for negative numbers.
2f2a50b9 2017-10-14 09:06:06 MFC: Xext/shm: Validate shmseg resource id (CVE-2017-13721) Otherwise it can belong to a non-existing client and abort X server with FatalError "client not in use", or overwrite existing segment of another existing client.
c6ab4990 2017-09-25 15:05:57 Force Intel Ironlake chipsets to use the xf86-video-intel driver. stsp@ reported that modesetting(4) has been reported unreliable on his laptop, while intel(4) works. XXXX to be removed after 6.2 to figure out and fix the issue. ok kettenis@, also discussed briefly with deraadt@ during EuroBSDCon.
b8da768e 2017-08-07 19:17:56 Disable SSE optimizations on i386/amd64 for SlowBcopy. It is supposed to be slow, and when such instructions are used to copy data from/to mapped video memory, some hypervisors (e.g. KVM, Microsoft Hyper-V) can generate SIGILL or SIGBUS exceptions, causing Xorg to crash. Bug report to OpenBSD by Max Parmer, fix from FreeBSD (Dimitry Andric) via kettenis@ ok kettenis@
38475bb3 2017-08-07 12:30:34 Create on OpenBSD-specific version of listPossibleVideoDrivers() that takes care of autoconfiguration based on the information returned by the WSDISPLAYIO_GTYPE ioctl of the console FD. This should fix selection of wsfb on loongson and sgi when using a non-KMS kernel driver. ok matthieu@, jsg@
d74e2cb1 2017-07-14 11:38:05 Use the modesetting driver by default on 4th generation Intel Graphics and later. This matches what several Linux distros do these days as it tends to work better than the intel driver in most cases. There are some performance issues with vncviewer on at least Ivy Bridge and Haswell. But for now that regression outweighs the benefits. ok robert@, tedu@, sthen@
11bfbfff 2017-07-12 20:08:07 Add code to update the value of the RandR "Backlight" property based on the KMS connector property of the same name if such a property is present. ok matthieu@
1862f548 2017-07-07 06:22:19 Merge upstream fixes to the X event swapping code. (CVE-2017-10971 and CVE-2017-10972).
55a8e552 2017-05-21 13:18:29 Make X work with radeondrm(4) hardware on loongson. OK jsg@
f372d76f 2017-03-07 03:40:33 make xserver build on arm64 ok matthieu@
2666ed3f 2017-03-01 19:22:36 Fix arc4random_buf(3) detection. Noticed by Eric Engestrom on the xorg-devel list. Thanks
da8f098a 2017-02-28 23:05:46 Oops, in previous commit I forgot to remove the actual implementation of the unused *ToID functions(). Spotted by Adam Jackson on xorg-devel list. Thanks.
5d64bd18 2017-02-28 18:33:44 regen
e087a236 2017-02-28 18:32:53 auth: remove AuthToIDFunc and associated functions. Not used anymore. And the current code for MitToId has a use-after-free() issue. Advisory X41-2017-001: Multiple Vulnerabilities in X.Org
eb3d2477 2017-02-28 18:27:40 MFC: Use arc4random_buf(3) if available to generate cookies. Advisory X41-2017-001: Multiple Vulnerabilities in X.Org.
9ddca5b5 2017-02-28 18:24:48 MFC: Use timingsafe_memcmp() to compare MIT-MAGIC-COOKIES Advisory X41-2017-001: Multiple Vulnerabilities in X.Org.
fd18c20e 2016-10-11 22:14:30 regen
13cbbbd6 2016-10-04 19:48:48 ignore chown error (for systems which don't install a Xserver)
8587a95e 2016-10-02 17:21:29 fix the ownership of the link /usr/X11R6/bin/X -> Xorg
b9d0c0fb 2016-09-12 21:57:14 Fix a bunch of gcc warnings. - constify name field - rename devname -> devnam - replace deprecated Xprintf() with asprintf()
595a0e50 2016-09-12 21:46:25 sys/select.h -> sys/time.h
d2533042 2016-09-12 21:44:30 Fix build after headers cleanup. include wscons headers after sys/ioct.h and sys/select.h with deraadt@ and kettenis@
8113144b 2016-09-03 14:58:02 Remove zaurus keyboard model ok matthieu@
ee65902d 2016-08-13 14:05:23 Kill remaining HP300 bits
6e1bcfb3 2016-08-09 18:59:50 Update to xserver 1.18.4 tested by krw@ and dcoppa@ ok dcoppa@
185312ce 2016-08-03 19:31:23 xserver: fix an off-by-one error that lead to asprintf("%s", NULL) reported by deraadt@, fix reviewed in X.Org by Keith Packard.
7d876864 2016-07-30 12:18:35 Merge the build of Xephyr in the main xserver build. Recent X server doesn't require to build the DIX with different options for xfree86 and kdrive. Tested for beeing a no-op on m88k by Kenji Aoyama. Thanks
e927c03e 2016-05-29 12:02:34 Update to xserver 1.18.3. Tested by shadchin@ and naddy@. Note that indirect GLX is now disbled by default.
5b07d034 2016-05-12 07:19:50 No more hppa64
6b14cdf9 2016-04-24 17:21:55 Fix white space/indentation to match X.Org style.
a009af0b 2016-04-24 17:20:04 Fall back to /dev/ttyC0 when the console device is not a wsdisplay(4) Problem noticed by sthen@.
a096d7ad 2016-04-02 16:57:58 Don't build the PCVT console backend anymore.
3b5e851d 2016-04-02 14:25:10 Implement VT switching (based on the USL compat interface) in the wscons console backend and use it by default. ok kettenis@
e44b23d2 2016-03-27 18:48:41 Make alpha_video.c build in recent X server. Completely broken on VGA cards (libpciaccess doesn't know about the alpha specific ways of mapping the PCI space), only XRender is broken on TGA cards.
27f67406 2016-03-11 13:09:42 Remove support vax and XENOCARA_HAVE_SHARED_LIBS scaffolding. ok matthieu@
ab587bce 2016-03-06 17:11:46 Cleanup gcc warnings and function prototypes.
926017f7 2016-03-06 16:09:27 Fix typo introduced 5.5 years ago. Note: this changes the #if test result, but the now #ifdef out code has no effect.
4a17b803 2016-02-20 10:58:10 No more aviion
f1584286 2016-02-07 09:51:01 solbourne was removed
ca4d0512 2015-12-29 18:47:21 Detect keyboard configuration by masking bits, not equality checks. Fixes the case where a kbd(8) setting has multiple bits set (e.g., us.dvorak.swapctrlcaps). Bug reported by Sevan Janiyan. ok shadchin@ matthieu@
ed4591c1 2015-12-21 08:37:11 On Broadwell, default to using the modesetting driver. Our KMS support on Broadwell is still a bit weak and the modesetting driver seems to work better than the intel driver, while still providing 3D acceleration and video playback support. ok phessler@, matthieu@, jsg@
c7a6143b 2015-12-01 21:20:21 Enable glamor on architectures where we have OpenGL. ok jsg@, matthieu@
2e2a8984 2015-12-01 21:18:47 Remove a check for DRI3 in glamor_name_from_pixmap(). This makes DRI2 work on OpenBSD where we don't have support for DRI3 yet. ok jsg@, matthieu@
bfcc545c 2015-12-01 21:17:49 Use an ARGB8888 based texture even when DRI3 isn't enabled. This achieves the same effect as a change that was recently made upstream. The code changed significantly in the meantime. ok jsg@, matthieu@
e6977614 2015-12-01 21:13:48 Call miSyncSetup() if we don't call miSyncShmScreenInit() because HAVE_XSHMFENCE isn't defined. This makes sure the relevant "private key" gets installed such that we don't hit a fatal assert later. ok jsg@, matthieu@
184a9833 2015-11-17 10:49:57 Pass --disable-libdrm option to configure when the machine does not support DRI. Found while building Xorg server on luna88k. "fine for now" matthieu@
1e036e40 2015-11-15 08:28:24 Remove the -configure option. This has been broken for a loong time and no one is going to fix it.
f7d98a31 2015-11-11 21:07:49 pledge(2) for the X server privileged process. ok deraadt@
4c6a4e1e 2015-11-07 16:48:51 Update to xserver 1.17.4. tested by naddy@
f00e3078 2015-10-25 15:24:06 Reduce white space diff with upstreams. No other change.
e957e255 2015-09-28 07:14:00 Post xserver 1.17 cleanup
5f3337ae 2015-09-28 06:20:25 Post-xserver 1.17 cleanup.
1867e4b0 2015-09-28 06:00:47 Post xserver 1.17 cleanup. Remove now unused functions.
11ed0dd9 2015-09-28 05:59:26 Update for xserver 1.17
7c1233b0 2015-09-28 05:53:20 Patch for xserver 1.17. Missed in upgrade commit.
86ea9f12 2015-09-16 19:10:19 Update to xserver 1.17.2. tested by dcoppa@, jsg@, jasper@ & naddy@
0a779e42 2015-08-30 13:32:02 Remove abuse of \/ which is not a slash but an italic correction; ok matthieu@, who will also push these fixes upstream (thanks).
4d7af2a4 2015-08-29 17:49:14 With the binutils got slot accounting fix, workaround it no longer needed ok miod@
67eafd38 2015-06-27 21:50:55 Build the Xserver with large got (-xgot as(1) option) on mips; needed to accomodate the growth of recent changes. Tested on loongson.
3e477e76 2015-06-20 10:03:56 Merge from upstream: Don't listen to 'tcp' by default. Add '-listen' option. commit cc59be38b7eff52a1d003b390f2994c73ee0b3e9 Author: Keith Packard <keithp@keithp.com> Date: Fri Sep 12 11:33:48 2014 -0700 os: Don't listen to 'tcp' by default. Add '-listen' option. [v2] This disables the tcp listen socket by default. Then, it uses a new xtrans interface, TRANS(Listen), to provide a command line option to re-enable those if desired. v2: Leave unix socket enabled by default. Add configure options. Signed-off-by: Keith Packard <keithp@keithp.com> Reviewed-by: Hans de Goede <hdegoede@redhat.com>
a8994d94 2015-05-31 13:23:03 Obsolete XAA includes should be gone now.
031b04ad 2015-05-27 15:11:12 Simplify arm_video.c; we will never have PCI graphics on this architecture. This also makes it possible to run wsudl(4) on armv7 machines with echi(4). Tested for non-regression on zaurus by Sigi Rudzio. Thanks.
2b01672b 2015-04-18 10:22:11 Bury kdriver/wscons code in the Attic. It has never worked and there is no plan to finish it.
5b19f6d7 2015-02-11 20:58:46 Update to xserver 1.16.4. Contains fix for CVE-2015-0255. ok dcoppa@
389048d7 2015-02-09 09:55:52 Enable file descriptor passing code. ok deraadt@, matthieu@
a77282ed 2015-02-09 09:45:32 Use __MAP_NOFAULT to map shared memory passed through file descriptors. This completely avoids the risk of getting killed by a signal because the backing storage isn't there. Use the __-prefixed name for now, as we might still change the name. ok deraadt@, matthieu@
56b31a08 2015-01-15 01:30:40 Recognise the synaptics with sw buttons mouse type and set the clickpad and has_secondary_buttons properties. Initial diff from myself with additional changes from matthieu@
7db4642f 2014-12-21 11:41:44 Update to xorg-server 1.16.3. Most of the 1.16.2->1.16.3 changes are the security patches that where already there. This adds some extra fixes plus a few unrelated bug fixes.
797ed933 2014-12-09 17:58:52 Protocol handling issues in X Window System servers One year after Ilja van Sprundel, discovered and reported a large number of issues in the way the X server code base handles requests from X clients, they have been fixed.
1cfce7c2 2014-11-22 08:33:45 Update to xserver 1.16.2
a20b025e 2014-10-20 06:14:42 regen
25d68f1c 2014-10-20 06:14:23 OpenBSD's make now supports -include. So reduce diff with upstreams. ok kettenis@ espie@
d1b6c6de 2014-10-18 14:39:40 No more /dev/agp0
64609bb7 2014-09-28 10:01:52 white space diff redux
4f58590a 2014-09-27 17:52:59 Update to xserver 1.16.1. Tested by naddy@, jsg@ & kettenis@
cd0bdbef 2014-09-27 17:49:46 Update to xserver 1.16.1. Tested by naddy@, jsg@ & kettenis@
4f333b16 2014-07-11 08:13:43 Update to xorg-server 1.15.2. bug fixes.
3bbfe7b1 2014-05-02 19:27:46 Update to xserver 1.15.1. Tested by at least ajacoutot@, dcoppa@ & jasper@
81a3c9ac 2014-03-18 22:37:28 Remove {hp300,mvme68k,mvme88k} bits.
569a1f62 2014-02-26 22:29:17 Call pci_system_init(), even if opening /dev/xf86 fails. Makes it possible to run X with machdep.allowaperture=0 on hardware supported by radeondrm(4) on macppc too. tested by landry@ ok matthieu@, deraadt@
66cca5a1 2014-02-15 15:00:28 Fix build of (disabled) wsfb kdrive backend.
625fe392 2013-12-28 16:31:18 mac68k and mvmeppc are no longer supported.
8742d82e 2013-12-28 14:40:01 Update to xserver 1.14.5
29c59cee 2013-12-15 11:31:09 Avoid timeouts of ULONG_MAX milliseconds. Stops the X server from crashing with "select returned EINVAL" messages. ok matthieu@
511a911d 2013-12-08 10:53:01 Update to xserver 1.14.4
63985638 2013-10-09 05:37:56 Fix from upstreams for CVE-2013-4396 Use after free in Xserver handling of ImageText requests
5ae225f3 2013-09-28 15:36:30 Update to xserver 1.14.3
84922f95 2013-09-09 14:51:24 revert a local patch to check for swrastg, LLVMpipe installs as swrast now ok mpi@ ajacoutot@