You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
xserver/Xext
Povilas Kanapickas 7209982d2a Xext: Fix out of bounds access in SProcScreenSaverSuspend()
ZDI-CAN-14951, CVE-2021-4010

This vulnerability was discovered and the fix was suggested by:
Jan-Niklas Sohn working with Trend Micro Zero Day Initiative

Signed-off-by: Povilas Kanapickas <povilas@radix.lt>
(cherry picked from commit 6c4c530107)
3 years ago
..
Makefile.am configure: Build hashtable for Xres and glvnd 4 years ago
bigreq.c Move extension initialisation prototypes into extinit.h 13 years ago
dpms.c Change the DPMS initialization to be conditional on not set from config 7 years ago
dpmsproc.h dpms: Consolidate a bunch of stuff into Xext/dpms.c 8 years ago
geext.c More missing version checks in SProcs 3 years ago
geext.h Move extension initialisation prototypes into extinit.h 13 years ago
geint.h xge: Hide some implementation details 10 years ago
hashtable.c dix: Fix undefined shift in ht_generic_hash 5 years ago
hashtable.h Fix spelling/wording issues 4 years ago
meson.build meson: hide C API if Xorg is disabled (like autotools) 4 years ago
panoramiX.c Xext: dynamically allocate the PanoramiXDepths[j].vids array 6 years ago
panoramiX.h Drop trailing whitespaces 10 years ago
panoramiXSwap.c dispatch: Mark swapped dispatch as _X_COLD 8 years ago
panoramiXh.h Introduce a consistent coding style 13 years ago
panoramiXprocs.c dix: Call SourceValidate before GetImage 5 years ago
panoramiXsrv.h Replace 'pointer' type with 'void *' 11 years ago
saver.c Xext: Fix out of bounds access in SProcScreenSaverSuspend() 3 years ago
security.c dispatch: Mark swapped dispatch as _X_COLD 8 years ago
securitysrv.h Introduce a consistent coding style 13 years ago
shape.c dispatch: Mark swapped dispatch as _X_COLD 8 years ago
shm.c os, shm: fcntl()'s third argument is integer, not pointer 4 years ago
shmint.h xext: Fix shmint.h to not use headers outside of sdk_HEADERS 11 years ago
sleepuntil.c os: Don't crash in AttendClient if the client is gone 5 years ago
sleepuntil.h Replace 'pointer' type with 'void *' 11 years ago
sync.c xsync: Add resource inside of SyncCreate, export SyncCreate 6 years ago
syncsdk.h xsync: Add resource inside of SyncCreate, export SyncCreate 6 years ago
syncsrv.h sync: Convert from "CARD64" to int64_t. 7 years ago
vidmode.c Fix spelling/wording issues 4 years ago
xace.c xace: Don't censor window borders 8 years ago
xace.h xace: Remove the audit hooks and tune dispatch 9 years ago
xacestr.h Replace 'pointer' type with 'void *' 11 years ago
xcmisc.c dispatch: Mark swapped dispatch as _X_COLD 8 years ago
xf86bigfont.c Drop workaround for pre-glibc linux 8 years ago
xf86bigfontsrv.h Move extension initialisation prototypes into extinit.h 13 years ago
xres.c Fix spelling/wording issues 4 years ago
xselinux.h Introduce a consistent coding style 13 years ago
xselinux_ext.c selinux: Stop using security_context_t 3 years ago
xselinux_hooks.c selinux: Stop using security_context_t 3 years ago
xselinux_label.c selinux: Stop using security_context_t 3 years ago
xselinuxint.h selinux: Stop using security_context_t 3 years ago
xtest.c Fix spelling/wording issues 4 years ago
xvdisp.c Unvalidated lengths 7 years ago
xvdisp.h Fix swapped Xv dispatch under Xinerama. 17 years ago
xvdix.h Drop trailing whitespaces 10 years ago
xvmain.c Fix spelling/wording issues 4 years ago
xvmc.c dispatch: Mark swapped dispatch as _X_COLD 8 years ago
xvmcext.h Replace 'pointer' type with 'void *' 11 years ago