IABSD.fr/xenocara/lib/libXrender/src/Xrenderint.h

Branch : - branch - master - tag -

• Show log

  Commit

• Author : matthieu
  Date : 2013-05-23 22:42:07
  Hash : 52f6d0ba
  Message : Merge upstream fixes for several X libs vulnerabilities discovered by Ilja van Sprundel. CVE-2013-1981 X.org libX11 1.5.99.901 (1.6 RC1) integer overflows CVE-2013-1982 X.org libXext 1.3.1 integer overflows CVE-2013-1983 X.org libXfixes 5.0 integer overflows CVE-2013-1984 X.org libXi 1.7.1 integer overflows CVE-2013-1985 X.org libXinerama 1.1.2 integer overflows CVE-2013-1986 X.org libXrandr 1.4.0 integer overflows CVE-2013-1987 X.org libXrender 0.9.7 integer overflows CVE-2013-1988 X.org libXRes 1.0.6 integer overflows CVE-2013-1989 X.org libXv 1.0.7 integer overflows CVE-2013-1990 X.org libXvMC 1.0.7 integer overflows CVE-2013-1991 X.org libXxf86dga 1.1.3 integer overflows CVE-2013-1992 X.org libdmx 1.1.2 integer overflows CVE-2013-1994 X.org libchromeXvMC & libchromeXvMCPro in openChrome 0.3.2 integer overflows CVE-2013-1995 X.org libXi 1.7.1 sign extension issues CVE-2013-1996 X.org libFS 1.0.4 sign extension issues CVE-2013-1997 X.org libX11 1.5.99.901 (1.6 RC1) buffer overflows CVE-2013-1998 X.org libXi 1.7.1 buffer overflows CVE-2013-1999 X.org libXvMC 1.0.7 buffer overflows CVE-2013-2000 X.org libXxf86dga 1.1.3 buffer overflows CVE-2013-2001 X.org libXxf86vm 1.1.2 buffer overflows CVE-2013-2002 X.org libXt 1.1.3 buffer overflows CVE-2013-2003 X.org libXcursor 1.1.13 integer overflows CVE-2013-2004 X.org libX11 1.5.99.901 (1.6 RC1) unbounded recursion CVE-2013-2005 X.org libXt 1.1.3 memory corruption CVE-2013-2066 X.org libXv 1.0.7 buffer overflows

• lib/libXrender/src/Xrenderint.h

• /*
   *
   * Copyright © 2000 SuSE, Inc.
   *
   * Permission to use, copy, modify, distribute, and sell this software and its
   * documentation for any purpose is hereby granted without fee, provided that
   * the above copyright notice appear in all copies and that both that
   * copyright notice and this permission notice appear in supporting
   * documentation, and that the name of SuSE not be used in advertising or
   * publicity pertaining to distribution of the software without specific,
   * written prior permission.  SuSE makes no representations about the
   * suitability of this software for any purpose.  It is provided "as is"
   * without express or implied warranty.
   *
   * SuSE DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL
   * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL SuSE
   * BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
   * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
   * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
   * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
   *
   * Author:  Keith Packard, SuSE, Inc.
   */
  
  #ifndef _XRENDERINT_H_
  #define _XRENDERINT_H_
  
  #include "config.h"
  #include <X11/Xlibint.h>
  #include <X11/Xutil.h>
  #include <X11/extensions/renderproto.h>
  #include "Xrender.h"
  
  typedef struct {
      Visual		*visual;
      XRenderPictFormat	*format;
  } XRenderVisual;
  
  typedef struct {
      int			depth;
      int			nvisuals;
      XRenderVisual	*visuals;
  } XRenderDepth;
  
  typedef struct {
      XRenderDepth	*depths;
      int			ndepths;
      XRenderPictFormat	*fallback;
      int			subpixel;
  } XRenderScreen;
  
  typedef struct _XRenderInfo {
      int			major_version;
      int			minor_version;
      XRenderPictFormat	*format;
      int			nformat;
      XRenderScreen	*screen;
      int			nscreen;
      XRenderDepth	*depth;
      int			ndepth;
      XRenderVisual	*visual;
      int			nvisual;
      int			*subpixel;
      int			nsubpixel;
      char		**filter;
      int			nfilter;
      short    		*filter_alias;
      int			nfilter_alias;
  } XRenderInfo;
  
  /* replaces XRenderExtDisplayInfo */
  typedef struct _XRenderExtDisplayInfo {
      struct _XRenderExtDisplayInfo *next;    /* keep a linked list */
      Display                       *display; /* which display this is */
      XExtCodes                     *codes;   /* the extension protocol codes */
      XRenderInfo                   *info;    /* extra data for the extension to use */
  } XRenderExtDisplayInfo;
  
  /* replaces XExtensionInfo */
  typedef struct _XRenderExtInfo {
      XRenderExtDisplayInfo  *head;           /* start of the list */
      XRenderExtDisplayInfo  *cur;            /* most recently used */
      int                     ndisplays;      /* number of displays */
  } XRenderExtInfo;
  
  extern XRenderExtInfo XRenderExtensionInfo;
  extern char XRenderExtensionName[];
  
  XRenderExtDisplayInfo *
  XRenderFindDisplay (Display *dpy);
  
  #define RenderHasExtension(i) ((i) && ((i)->codes))
  
  #define RenderCheckExtension(dpy,i,val) \
    if (!RenderHasExtension(i)) { return val; }
  
  #define RenderSimpleCheckExtension(dpy,i) \
    if (!RenderHasExtension(i)) { return; }
  
  /*
   * Xlib uses long for 32-bit values.  Xrender uses int.  This
   * matters on alpha.  Note that this macro assumes that int is 32 bits
   * except on WORD64 machines where it is 64 bits.
   */
  
  #ifdef WORD64
  #define DataInt32(dpy,d,len)	Data32(dpy,(long *) (d),len)
  #else
  #define DataInt32(dpy,d,len)	Data(dpy,(char *) (d),len)
  #endif
  
  #ifndef HAVE__XEATDATAWORDS
  #include <X11/Xmd.h>  /* for LONG64 on 64-bit platforms */
  #include <limits.h>
  
  static inline void _XEatDataWords(Display *dpy, unsigned long n)
  {
  # ifndef LONG64
      if (n >= (ULONG_MAX >> 2))
          _XIOError(dpy);
  # endif
      _XEatData (dpy, n << 2);
  }
  #endif
  
  #endif /* _XRENDERINT_H_ */