nx-libs/nx-X11/programs, branch pr/render-cve-fixes

render: unvalidated lengths in Render extn. swapped procs [CVE-2014-8100 2/2]

2015-05-24T23:03:10+00:00

v2: backport to nx-libs 3.6.x (Mike DePaulo) v3: port to NXrender.c rather than render.c (Mike DePaulo) Signed-off-by: Alan Coopersmith Reviewed-by: Peter Hutterer Conflicts: render/render.c

render: check request size before reading it [CVE-2014-8100 1/2]

2015-05-24T23:02:56+00:00

Otherwise we may be reading outside of the client request. v2: backport to nx-libs 3.6.x (Mike DePaulo) v3: port to NXrender.c rather than render.c (Mike DePaulo) Signed-off-by: Julien Cristau Reviewed-by: Alan Coopersmith Signed-off-by: Alan Coopersmith Conflicts: render/render.c

library clean-up: Don't build libNX_Xdamage anymore. Use system's libXdamage shared library. (Fixes ArcticaProject/nx-libs#6, X2GoBTS#826).

2015-05-01T13:46:01+00:00

dix: Allow zero-height PutImage requests (fix for X.Org's CVE-2015-3418).

2015-05-01T11:17:03+00:00

The length checking code validates PutImage height and byte width by making sure that byte-width >= INT32_MAX / height. If height is zero, this generates a divide by zero exception. Allow zero height requests explicitly, bypassing the INT32_MAX check. Fix for regression introduced by fix for CVE-2014-8092. v2: backports to nx-libs 3.6.x (Mike Gabriel) Signed-off-by: Keith Packard

imake cleanup: Drop references to X11 build-logic that is not present in nx-X11.

2015-04-28T03:09:09+00:00

library clean-up: Don't build libNX_Xdmcp anymore. Use system's libXdmcp shared library.

2015-04-22T20:42:39+00:00

library clean-up: Don't build and link libXfont.a anymore. Use system's libXfont shared library and link dynamically.

2015-04-22T04:22:37+00:00

imake cleanup (nx-X11/programs/Xserver/Imakefile): Drop build rules for XF86Server and XorgServer.

2015-04-16T23:32:45+00:00

NXAGENT_UPGRADE code cleanup:

2015-04-16T15:59:18+00:00

NX agent contains/ed two build trees. An old one (probably pre-3.x.y) and a "newer" one. The "newer" code tree used to become enabled by setting NXUpgradeAgentServer in nx-X11/config/cf/host.def to YES. As building the NXUpgradeAgentServer has been the default for years now, we drop all code that does not get used at build time for NXUpgradeAgentServer == YES (i.e., the code that belongs to the pre-3.x.y phase of NX agent).

imake cleanup: nx-X11/programs/Xserver/Imakefile (drop non-provided Xserver variants)

2015-04-05T18:54:25+00:00