nx-libs/nx-X11/lib/font, branch 3.5.99.16

library clean-up: Don't build and link libXfont.a anymore. Use system's libXfont shared library and link dynamically.

2015-04-22T04:22:37+00:00

old-arch cleanup: Drop CRAY support (i.e., drop code related to CRAY, _CRAY, WORD64, WORD64ALIGN, MUSTCOPY, UNSIGNEDBITFIELDS definitions).

2015-04-16T12:09:07+00:00

Do proper input validation to fix for CVE-2011-2895.

2015-02-16T09:29:36+00:00

It ensures that all valid input can be decompressed, checks that the overflow conditions doesn't happen and generally tightens the validation of the LZW stream and doesn't pessimize the inner loop for no good reason. It's derived from a change in libarchive from 2004. v2: backports to nx-libs 3.6.x (Mihai Moldovan) v3: fix comment lines starting with "+" + whitespace fixes (Mike Gabriel) Signed-off-by: Matthieu Herrb Reviewed-by: Tomas Hoger

Revert "Do proper input validation to fix for CVE-2011-2895."

2015-02-16T09:29:14+00:00

This reverts commit 6acafc9334828da22446380c81af81bde14b5d86.

Do proper input validation to fix for CVE-2011-2895.

2015-02-16T05:16:41+00:00

It ensures that all valid input can be decompressed, checks that the overflow conditions doesn't happen and generally tightens the validation of the LZW stream and doesn't pessimize the inner loop for no good reason. It's derived from a change in libarchive from 2004. v2: backports to nx-libs 3.6.x (Mihai Moldovan) Signed-off-by: Matthieu Herrb Reviewed-by: Tomas Hoger

nx-X11/lib/font/fc/fserve.c: initialize remaining bufleft variables.

2015-02-16T05:03:48+00:00

CVE-2014-0210: unvalidated length in _fs_recv_conn_setup() from xorg/lib/libXfont commit 891e084b26837162b12f841060086a105edde86d

2015-02-16T04:54:00+00:00

The connection setup reply from the font server can include a list of alternate servers to contact if this font server stops working. The reply specifies a total size of all the font server names, and then provides a list of names. _fs_recv_conn_setup() allocated the specified total size for copying the names to, but didn't check to make sure it wasn't copying more data to that buffer than the size it had allocated. v2: use xfree() instead of free() for nx-libs 3.6.x (Mihai Moldovan)

Revert "CVE-2014-0210: unvalidated length in _fs_recv_conn_setup() from xorg/lib/libXfont commit 891e084b26837162b12f841060086a105edde86d"

2015-02-16T04:52:09+00:00

This reverts commit 94c6de0649cd295044b1e4ff7265949c9c787519.

CVE-2014-0210: unvalidated length fields in fs_read_query_info() from xorg/lib/libXfont commit 491291cabf78efdeec8f18b09e14726a9030cc8f

2015-02-16T04:47:25+00:00

fs_read_query_info() parses a reply from the font server. The reply contains embedded length fields, none of which are validated. This can cause out of bound reads in either fs_read_query_info() or in _fs_convert_props() which it calls to parse the fsPropInfo in the reply. v2: apply correctly on nx-libs 3.6.x (Mihai Moldovan)

Revert "CVE-2014-0210: unvalidated length fields in fs_read_query_info() from xorg/lib/libXfont commit 491291cabf78efdeec8f18b09e14726a9030cc8f"

2015-02-16T04:26:40+00:00

This reverts commit c6aebf9284855a0e24ad9c5ffdd36aa65e16bec7.