IABSD.fr/xenocara/xserver/os/io.c

Branch :


Log

Author Commit Date CI Message
4607666e 2025-06-19 05:16:21 Check for integer overflow on BigRequest length. Related to CVE-2025-49176.
e8f2e774 2025-06-17 13:10:07 Merge fixes from upstream for multiple Xserver issues: CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) CVE-2025-49176: Integer overflow in Big Requests Extension CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) CVE-2025-49178: Unprocessed client request via bytes to ignore CVE-2025-49179: Integer overflow in X Record extension CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty)
e086cf5a 2021-11-11 09:03:02 Update to xserver 21.1.0
9064f8ee 2020-04-13 08:06:58 Update to xserver 1.20.8. ok jsg@ robert@
a77e9959 2019-07-27 07:57:06 Update to xserver 1.20.5. Tested by jsg@
1a66cad3 2017-12-08 15:01:59 Update to xserver 1.19.5. Tested by bru@, jsg@ and others
fe08a081 2017-10-14 09:17:40 MFC: os: Make sure big requests have sufficient length. A client can send a big request where the 32B "length" field has value 0. When the big request header is removed and the length corrected, the value will underflow to 0xFFFFFFFF. Functions processing the request later will think that the client sent much more data and may touch memory beyond the receive buffer.
86ea9f12 2015-09-16 19:10:19 Update to xserver 1.17.2. tested by dcoppa@, jsg@, jasper@ & naddy@
4f58590a 2014-09-27 17:52:59 Update to xserver 1.16.1. Tested by naddy@, jsg@ & kettenis@
3bbfe7b1 2014-05-02 19:27:46 Update to xserver 1.15.1. Tested by at least ajacoutot@, dcoppa@ & jasper@
577763cd 2013-08-24 19:44:25 Uodate to xserver 1.14.2. Tested by krw@, shadchin@, todd@
adec87cf 2013-06-07 17:28:45 Update to X server 1.14.1. Tested by many during t2k13. Thanks.
e60da745 2012-06-10 13:21:05 Update to xserver 1.12.2. tested by naddy@, krw@, mpi@.
4344ac39 2011-12-18 16:08:59 Bugfix Update to xserver 1.11.3
dd56fb17 2010-12-21 20:10:44 Update to xorg-server 1.9.3. Tested by japser@, landry@ and ajacoutot@ in various configurations.
42826119 2010-12-05 15:36:02 Upgrade to xorg-server 1.9.2. Tested by ajacoutot@, krw@, shadchin@ and jasper@ on various configurations including multihead with both zaphod and xrandr.
95d684a0 2010-07-27 19:02:24 Update to xserver 1.8. Tested by many. Ok oga@, todd@.
88f6f3ea 2009-09-06 19:44:18 update to xserver 1.6.4rc1. Tested by many, ok oga@.
60021fe9 2008-11-02 15:26:08 xserver 1.5.2. tested by ckuethe@, oga@, and others.
97eda178 2008-06-15 00:17:32 Update to xserver 1.4.2. Tested by landry@, ckuethe@, jsing@ mbalmer@.
b14d6de7 2007-11-24 17:55:21 xserver 1.4
889b8606 2006-11-26 18:13:41 Importing xserver from X.Org 7.2RC2