nx-libs/nx-X11/programs, branch pr/Xext-cve-fixes

Xv: unvalidated lengths in XVideo extension swapped procs [CVE-2014-8099]

2015-05-31T02:19:23+00:00

v2: backport to nx-libs 3.6.x (Mike DePaulo) v3: port to NXxvdisp.c rather than xvdisp.c (Mike DePaulo) Signed-off-by: Alan Coopersmith Reviewed-by: Peter Hutterer Conflicts: Xext/xvdisp.c

Merge pull request #36 from ArcticaProject/pr/render-cve-fixes

2015-05-26T08:31:46+00:00

XRender CVE fixes for nxagent (X.Org CVE-2014-8100)

render: unvalidated lengths in Render extn. swapped procs [CVE-2014-8100 2/2]

2015-05-24T23:03:10+00:00

v2: backport to nx-libs 3.6.x (Mike DePaulo) v3: port to NXrender.c rather than render.c (Mike DePaulo) Signed-off-by: Alan Coopersmith Reviewed-by: Peter Hutterer Conflicts: render/render.c

render: check request size before reading it [CVE-2014-8100 1/2]

2015-05-24T23:02:56+00:00

Otherwise we may be reading outside of the client request. v2: backport to nx-libs 3.6.x (Mike DePaulo) v3: port to NXrender.c rather than render.c (Mike DePaulo) Signed-off-by: Julien Cristau Reviewed-by: Alan Coopersmith Signed-off-by: Alan Coopersmith Conflicts: render/render.c

hw/nxagent clean-up: Drop NXrandr.{c|h} client lib copy-of-code from nxagent hardware driver.

2015-05-20T10:16:15+00:00

library clean-up: Don't build libNX_Xrandr anymore. Use system's libXrandr shared library.

2015-05-20T10:16:15+00:00

library clean-up: Don't build libNX_Xdamage anymore. Use system's libXdamage shared library. (Fixes ArcticaProject/nx-libs#6, X2GoBTS#826).

2015-05-01T13:46:01+00:00

dix: Allow zero-height PutImage requests (fix for X.Org's CVE-2015-3418).

2015-05-01T11:17:03+00:00

The length checking code validates PutImage height and byte width by making sure that byte-width >= INT32_MAX / height. If height is zero, this generates a divide by zero exception. Allow zero height requests explicitly, bypassing the INT32_MAX check. Fix for regression introduced by fix for CVE-2014-8092. v2: backports to nx-libs 3.6.x (Mike Gabriel) Signed-off-by: Keith Packard

imake cleanup: Drop references to X11 build-logic that is not present in nx-X11.

2015-04-28T03:09:09+00:00

library clean-up: Don't build libNX_Xdmcp anymore. Use system's libXdmcp shared library.

2015-04-22T20:42:39+00:00