<feed xmlns='http://www.w3.org/2005/Atom'>
<title>nx-libs/nx-X11/programs/Xserver/xkb, branch pr/dix-cve-fixes</title>
<subtitle>NXv3 (redistributed) 
</subtitle>
<id>https://cgit.arctica-project.org/nx-libs/atom?h=pr%2Fdix-cve-fixes</id>
<link rel='self' href='https://cgit.arctica-project.org/nx-libs/atom?h=pr%2Fdix-cve-fixes'/>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/'/>
<updated>2015-02-18T02:26:01+00:00</updated>
<entry>
<title>xkb: Check strings length against request size</title>
<updated>2015-02-18T02:26:01+00:00</updated>
<author>
<name>Olivier Fourdan</name>
<email>ofourdan@redhat.com</email>
</author>
<published>2015-01-16T07:44:45+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=d7258444a876a65986212c10ddcaa1783af558bf'/>
<id>urn:sha1:d7258444a876a65986212c10ddcaa1783af558bf</id>
<content type='text'>
Ensure that the given strings length in an XkbSetGeometry request remain
within the limits of the size of the request.

v3: backport to nx-libs 3.6.x because this is
the CVE-2015-0255 fix (Mike DePaulo)

Signed-off-by: Olivier Fourdan &lt;ofourdan@redhat.com&gt;
Reviewed-by: Peter Hutterer &lt;peter.hutterer@who-t.net&gt;
Signed-off-by: Peter Hutterer &lt;peter.hutterer@who-t.net&gt;
(cherry picked from commit 20079c36cf7d377938ca5478447d8b9045cb7d43)
(cherry picked from commit f160e722672dbb2b5215870b47bcc51461d96ff1)
Signed-off-by: Julien Cristau &lt;jcristau@debian.org&gt;
</content>
</entry>
<entry>
<title>xkb: Don't swap XkbSetGeometry data in the input buffer</title>
<updated>2015-02-18T02:24:28+00:00</updated>
<author>
<name>Olivier Fourdan</name>
<email>ofourdan@redhat.com</email>
</author>
<published>2015-01-16T19:08:59+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=9308c79ba2757cb1a64e0040176b8290b435544f'/>
<id>urn:sha1:9308c79ba2757cb1a64e0040176b8290b435544f</id>
<content type='text'>
The XkbSetGeometry request embeds data which needs to be swapped when the
server and the client have different endianess.

_XkbSetGeometry() invokes functions that swap these data directly in the
input buffer.

However, ProcXkbSetGeometry() may call _XkbSetGeometry() more than once
(if there is more than one keyboard), thus causing on swapped clients the
same data to be swapped twice in memory, further causing a server crash
because the strings lengths on the second time are way off bounds.

To allow _XkbSetGeometry() to run reliably more than once with swapped
clients, do not swap the data in the buffer, use variables instead.

v3: backport to nx-libs 3.6.x as a prereq for
the CVE-2015-0255 fix (Mike DePaulo)

Signed-off-by: Olivier Fourdan &lt;ofourdan@redhat.com&gt;
Signed-off-by: Peter Hutterer &lt;peter.hutterer@who-t.net&gt;
(cherry picked from commit 81c90dc8f0aae3b65730409b1b615b5fa7280ebd)
(cherry picked from commit 29be310c303914090298ddda93a5bd5d00a94945)
Signed-off-by: Julien Cristau &lt;jcristau@debian.org&gt;
index 2405090..7db0959 100644
</content>
</entry>
<entry>
<title>Coverity #844, #845, #846: Fix memory leaks.</title>
<updated>2015-02-18T02:21:20+00:00</updated>
<author>
<name>Daniel Stone</name>
<email>daniel@fooishbar.org</email>
</author>
<published>2006-04-07T16:07:50+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=d6ce946f9c0bb5746b8333b3f589aa8527739431'/>
<id>urn:sha1:d6ce946f9c0bb5746b8333b3f589aa8527739431</id>
<content type='text'>
v2: backport to nx-libs 3.6.x as a prereq for
the CVE-2015-0255 fix (Mike DePaulo)
</content>
</entry>
<entry>
<title>Handle some serious compilation warnings (603_nx-X11_compilation_warnings.full.patch).</title>
<updated>2015-02-13T12:34:16+00:00</updated>
<author>
<name>Mirraz Mirraz</name>
<email>mirraz1@rambler.ru</email>
</author>
<published>2015-02-13T12:34:16+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=96d5e74a30ea8571c3e403bd5d5b3080aaa193f1'/>
<id>urn:sha1:96d5e74a30ea8571c3e403bd5d5b3080aaa193f1</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Test for xkb/rules/base instead of xkb/keymap.dir for setting XkbBaseDir (302_nx-X11_xkbbasedir-detection.full.patch).</title>
<updated>2015-02-13T08:49:52+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-02-13T08:49:52+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=4dc1bd0043aed6b92526cbda26991be1f611a121'/>
<id>urn:sha1:4dc1bd0043aed6b92526cbda26991be1f611a121</id>
<content type='text'>
  In recent (as of 2014/06) X.org release, the keymap.dir file
  has become obsolete. Let's test for the xkb/rules/base file
  instead.
</content>
</entry>
<entry>
<title>drop .original files from the current code base</title>
<updated>2015-02-02T14:04:01+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2015-02-02T14:04:01+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=e399356ed17baf7b50da393a3f13682b01bd14a9'/>
<id>urn:sha1:e399356ed17baf7b50da393a3f13682b01bd14a9</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Imported nx-X11-3.3.0-6.tar.gz</title>
<updated>2011-10-10T15:47:40+00:00</updated>
<author>
<name>Reinhard Tartler</name>
<email>siretart@tauware.de</email>
</author>
<published>2011-10-10T15:47:40+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=bd433c6487a52f95e6bb949d5698dc5ea0923713'/>
<id>urn:sha1:bd433c6487a52f95e6bb949d5698dc5ea0923713</id>
<content type='text'>
Summary: Imported nx-X11-3.3.0-6.tar.gz
Keywords:

Imported nx-X11-3.3.0-6.tar.gz
into Git repository
</content>
</entry>
<entry>
<title>Imported nx-X11-3.3.0-3.tar.gz</title>
<updated>2011-10-10T15:47:32+00:00</updated>
<author>
<name>Reinhard Tartler</name>
<email>siretart@tauware.de</email>
</author>
<published>2011-10-10T15:47:32+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=01ed75712979168d0355bd594a741c02a088685c'/>
<id>urn:sha1:01ed75712979168d0355bd594a741c02a088685c</id>
<content type='text'>
Summary: Imported nx-X11-3.3.0-3.tar.gz
Keywords:

Imported nx-X11-3.3.0-3.tar.gz
into Git repository
</content>
</entry>
<entry>
<title>Imported nx-X11-3.2.0-1.tar.gz</title>
<updated>2011-10-10T15:47:28+00:00</updated>
<author>
<name>Reinhard Tartler</name>
<email>siretart@tauware.de</email>
</author>
<published>2011-10-10T15:47:28+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=713da22603c4abc7a97feddd931f29c507b7984b'/>
<id>urn:sha1:713da22603c4abc7a97feddd931f29c507b7984b</id>
<content type='text'>
Summary: Imported nx-X11-3.2.0-1.tar.gz
Keywords:

Imported nx-X11-3.2.0-1.tar.gz
into Git repository
</content>
</entry>
<entry>
<title>Imported nx-X11-3.1.0-1.tar.gz</title>
<updated>2011-10-10T15:43:39+00:00</updated>
<author>
<name>Reinhard Tartler</name>
<email>siretart@tauware.de</email>
</author>
<published>2011-10-10T15:43:39+00:00</published>
<link rel='alternate' type='text/html' href='https://cgit.arctica-project.org/nx-libs/commit/?id=f4092abdf94af6a99aff944d6264bc1284e8bdd4'/>
<id>urn:sha1:f4092abdf94af6a99aff944d6264bc1284e8bdd4</id>
<content type='text'>
Summary: Imported nx-X11-3.1.0-1.tar.gz
Keywords:

Imported nx-X11-3.1.0-1.tar.gz
into Git repository
</content>
</entry>
</feed>
