svn merge https://vcxsrv.svn.sourceforge.net/svnroot/vcxsrv/branches/released

1 files changed, 1279 insertions, 1278 deletions

diff --git a/xorg-server/Xext/shm.c b/xorg-server/Xext/shm.c
index 52e117940..d3393bfed 100644
--- a/xorg-server/Xext/shm.c
+++ b/xorg-server/Xext/shm.c
@@ -1,1278 +1,1279 @@
-/************************************************************
-
-Copyright 1989, 1998  The Open Group
-
-Permission to use, copy, modify, distribute, and sell this software and its
-documentation for any purpose is hereby granted without fee, provided that
-the above copyright notice appear in all copies and that both that
-copyright notice and this permission notice appear in supporting
-documentation.
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
-OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
-AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-Except as contained in this notice, the name of The Open Group shall not be
-used in advertising or otherwise to promote the sale, use or other dealings
-in this Software without prior written authorization from The Open Group.
-
-********************************************************/
-
-/* THIS IS NOT AN X CONSORTIUM STANDARD OR AN X PROJECT TEAM SPECIFICATION */
-
-
-#define SHM
-
-#ifdef HAVE_DIX_CONFIG_H
-#include <dix-config.h>
-#endif
-
-#include <sys/types.h>
-#if !defined(_MSC_VER)
-#include <sys/ipc.h>
-#include <sys/shm.h>
-#endif
-#include <unistd.h>
-#include <sys/stat.h>
-#include <X11/X.h>
-#include <X11/Xproto.h>
-#include "misc.h"
-#include "os.h"
-#include "dixstruct.h"
-#include "resource.h"
-#include "scrnintstr.h"
-#include "windowstr.h"
-#include "pixmapstr.h"
-#include "gcstruct.h"
-#include "extnsionst.h"
-#include "servermd.h"
-#include "shmint.h"
-#include "xace.h"
-#include <X11/extensions/shmproto.h>
-#include <X11/Xfuncproto.h>
-
-/* Needed for Solaris cross-zone shared memory extension */
-#ifdef HAVE_SHMCTL64
-#include <sys/ipc_impl.h>
-#define SHMSTAT(id, buf)	shmctl64(id, IPC_STAT64, buf)
-#define SHMSTAT_TYPE 		struct shmid_ds64
-#define SHMPERM_TYPE 		struct ipc_perm64
-#define SHM_PERM(buf) 		buf.shmx_perm
-#define SHM_SEGSZ(buf)		buf.shmx_segsz
-#define SHMPERM_UID(p)		p->ipcx_uid
-#define SHMPERM_CUID(p)		p->ipcx_cuid
-#define SHMPERM_GID(p)		p->ipcx_gid
-#define SHMPERM_CGID(p)		p->ipcx_cgid
-#define SHMPERM_MODE(p)		p->ipcx_mode
-#define SHMPERM_ZONEID(p)	p->ipcx_zoneid
-#else
-#define SHMSTAT(id, buf) 	shmctl(id, IPC_STAT, buf)
-#define SHMSTAT_TYPE 		struct shmid_ds
-#define SHMPERM_TYPE 		struct ipc_perm
-#define SHM_PERM(buf) 		buf.shm_perm
-#define SHM_SEGSZ(buf)		buf.shm_segsz
-#define SHMPERM_UID(p)		p->uid
-#define SHMPERM_CUID(p)		p->cuid
-#define SHMPERM_GID(p)		p->gid
-#define SHMPERM_CGID(p)		p->cgid
-#define SHMPERM_MODE(p)		p->mode
-#endif
-
-#ifdef PANORAMIX
-#include "panoramiX.h"
-#include "panoramiXsrv.h"
-#endif
-
-#include "modinit.h"
-
-typedef struct _ShmDesc {
-    struct _ShmDesc *next;
-    int shmid;
-    int refcnt;
-    char *addr;
-    Bool writable;
-    unsigned long size;
-} ShmDescRec, *ShmDescPtr;
-
-static PixmapPtr fbShmCreatePixmap(XSHM_CREATE_PIXMAP_ARGS);
-static int ShmDetachSegment(
-    pointer		/* value */,
-    XID			/* shmseg */
-    );
-static void ShmResetProc(
-    ExtensionEntry *	/* extEntry */
-    );
-static void SShmCompletionEvent(
-    xShmCompletionEvent * /* from */,
-    xShmCompletionEvent * /* to */
-    );
-
-static Bool ShmDestroyPixmap (PixmapPtr pPixmap);
-
-static DISPATCH_PROC(ProcShmAttach);
-static DISPATCH_PROC(ProcShmCreatePixmap);
-static DISPATCH_PROC(ProcShmDetach);
-static DISPATCH_PROC(ProcShmDispatch);
-static DISPATCH_PROC(ProcShmGetImage);
-static DISPATCH_PROC(ProcShmPutImage);
-static DISPATCH_PROC(ProcShmQueryVersion);
-static DISPATCH_PROC(SProcShmAttach);
-static DISPATCH_PROC(SProcShmCreatePixmap);
-static DISPATCH_PROC(SProcShmDetach);
-static DISPATCH_PROC(SProcShmDispatch);
-static DISPATCH_PROC(SProcShmGetImage);
-static DISPATCH_PROC(SProcShmPutImage);
-static DISPATCH_PROC(SProcShmQueryVersion);
-
-static unsigned char ShmReqCode;
-int ShmCompletionCode;
-int BadShmSegCode;
-RESTYPE ShmSegType;
-static ShmDescPtr Shmsegs;
-static Bool sharedPixmaps;
-static ShmFuncsPtr shmFuncs[MAXSCREENS];
-static DestroyPixmapProcPtr destroyPixmap[MAXSCREENS];
-static int shmPixmapPrivateIndex;
-static DevPrivateKey shmPixmapPrivate = &shmPixmapPrivateIndex;
-static ShmFuncs miFuncs = {NULL, NULL};
-static ShmFuncs fbFuncs = {fbShmCreatePixmap, NULL};
-
-#define VERIFY_SHMSEG(shmseg,shmdesc,client) \
-{ \
-    int rc; \
-    rc = dixLookupResourceByType((pointer *)&(shmdesc), shmseg, ShmSegType, \
-                                 client, DixReadAccess); \
-    if (rc != Success) \
-	return (rc == BadValue) ? BadShmSegCode : rc; \
-}
-
-#define VERIFY_SHMPTR(shmseg,offset,needwrite,shmdesc,client) \
-{ \
-    VERIFY_SHMSEG(shmseg, shmdesc, client); \
-    if ((offset & 3) || (offset > shmdesc->size)) \
-    { \
-	client->errorValue = offset; \
-	return BadValue; \
-    } \
-    if (needwrite && !shmdesc->writable) \
-	return BadAccess; \
-}
-
-#define VERIFY_SHMSIZE(shmdesc,offset,len,client) \
-{ \
-    if ((offset + len) > shmdesc->size) \
-    { \
-	return BadAccess; \
-    } \
-}
-
-
-#if defined(__FreeBSD__) || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__CYGWIN__) || defined(__DragonFly__)
-#include <sys/signal.h>
-
-static Bool badSysCall = FALSE;
-
-static void
-SigSysHandler(int signo)
-{
-    badSysCall = TRUE;
-}
-
-static Bool CheckForShmSyscall(void)
-{
-    void (*oldHandler)();
-    int shmid = -1;
-
-    /* If no SHM support in the kernel, the bad syscall will generate SIGSYS */
-    oldHandler = signal(SIGSYS, SigSysHandler);
-
-    badSysCall = FALSE;
-    shmid = shmget(IPC_PRIVATE, 4096, IPC_CREAT);
-
-    if (shmid != -1)
-    {
-        /* Successful allocation - clean up */
-	shmctl(shmid, IPC_RMID, NULL);
-    }
-    else
-    {
-        /* Allocation failed */
-        badSysCall = TRUE;
-    }
-    signal(SIGSYS, oldHandler);
-    return(!badSysCall);
-}
-
-#define MUST_CHECK_FOR_SHM_SYSCALL
-
-#endif
-
-void
-ShmExtensionInit(INITARGS)
-{
-    ExtensionEntry *extEntry;
-    int i;
-
-#ifdef MUST_CHECK_FOR_SHM_SYSCALL
-    if (!CheckForShmSyscall())
-    {
-	ErrorF("MIT-SHM extension disabled due to lack of kernel support\n");
-	return;
-    }
-#endif
-
-    sharedPixmaps = xFalse;
-    {
-      sharedPixmaps = xTrue;
-      for (i = 0; i < screenInfo.numScreens; i++)
-      {
-	if (!shmFuncs[i])
-	    shmFuncs[i] = &miFuncs;
-	if (!shmFuncs[i]->CreatePixmap)
-	    sharedPixmaps = xFalse;
-      }
-      if (sharedPixmaps)
-	for (i = 0; i < screenInfo.numScreens; i++)
-	{
-	    destroyPixmap[i] = screenInfo.screens[i]->DestroyPixmap;
-	    screenInfo.screens[i]->DestroyPixmap = ShmDestroyPixmap;
-	}
-    }
-    ShmSegType = CreateNewResourceType(ShmDetachSegment);
-    if (ShmSegType &&
-	(extEntry = AddExtension(SHMNAME, ShmNumberEvents, ShmNumberErrors,
-				 ProcShmDispatch, SProcShmDispatch,
-				 ShmResetProc, StandardMinorOpcode)))
-    {
-	ShmReqCode = (unsigned char)extEntry->base;
-	ShmCompletionCode = extEntry->eventBase;
-	BadShmSegCode = extEntry->errorBase;
-	EventSwapVector[ShmCompletionCode] = (EventSwapPtr) SShmCompletionEvent;
-    }
-}
-
-/*ARGSUSED*/
-static void
-ShmResetProc(ExtensionEntry *extEntry)
-{
-    int i;
-
-    for (i = 0; i < MAXSCREENS; i++)
-    {
-	shmFuncs[i] = NULL;
-    }
-}
-
-void
-ShmRegisterFuncs(ScreenPtr pScreen, ShmFuncsPtr funcs)
-{
-    shmFuncs[pScreen->myNum] = funcs;
-}
-
-static Bool
-ShmDestroyPixmap (PixmapPtr pPixmap)
-{
-    ScreenPtr	    pScreen = pPixmap->drawable.pScreen;
-    Bool	    ret;
-    if (pPixmap->refcnt == 1)
-    {
-	ShmDescPtr  shmdesc;
-	shmdesc = (ShmDescPtr)dixLookupPrivate(&pPixmap->devPrivates,
-					       shmPixmapPrivate);
-	if (shmdesc)
-	    ShmDetachSegment ((pointer) shmdesc, pPixmap->drawable.id);
-    }
-    
-    pScreen->DestroyPixmap = destroyPixmap[pScreen->myNum];
-    ret = (*pScreen->DestroyPixmap) (pPixmap);
-    destroyPixmap[pScreen->myNum] = pScreen->DestroyPixmap;
-    pScreen->DestroyPixmap = ShmDestroyPixmap;
-    return ret;
-}
-
-void
-ShmRegisterFbFuncs(ScreenPtr pScreen)
-{
-    shmFuncs[pScreen->myNum] = &fbFuncs;
-}
-
-static int
-ProcShmQueryVersion(ClientPtr client)
-{
-    xShmQueryVersionReply rep;
-    int n;
-
-    REQUEST_SIZE_MATCH(xShmQueryVersionReq);
-    memset(&rep, 0, sizeof(xShmQueryVersionReply));
-    rep.type = X_Reply;
-    rep.length = 0;
-    rep.sequenceNumber = client->sequence;
-    rep.sharedPixmaps = sharedPixmaps;
-    rep.pixmapFormat = sharedPixmaps ? ZPixmap : 0;
-    rep.majorVersion = SHM_MAJOR_VERSION;
-    rep.minorVersion = SHM_MINOR_VERSION;
-#ifndef _MSC_VER
-    rep.uid = geteuid();
-    rep.gid = getegid();
-#endif
-    if (client->swapped) {
-    	swaps(&rep.sequenceNumber, n);
-    	swapl(&rep.length, n);
-	swaps(&rep.majorVersion, n);
-	swaps(&rep.minorVersion, n);
-	swaps(&rep.uid, n);
-	swaps(&rep.gid, n);
-    }
-    WriteToClient(client, sizeof(xShmQueryVersionReply), (char *)&rep);
-    return (client->noClientException);
-}
-
-/*
- * Simulate the access() system call for a shared memory segement,
- * using the credentials from the client if available
- */
-static int
-shm_access(ClientPtr client, SHMPERM_TYPE *perm, int readonly)
-{
-    int uid, gid;
-    mode_t mask;
-    int uidset = 0, gidset = 0;
-    LocalClientCredRec *lcc;
-    
-    if (GetLocalClientCreds(client, &lcc) != -1) {
-
-	if (lcc->fieldsSet & LCC_UID_SET) {
-	    uid = lcc->euid;
-	    uidset = 1;
-	}
-	if (lcc->fieldsSet & LCC_GID_SET) {
-	    gid = lcc->egid;
-	    gidset = 1;
-	}
-
-#if defined(HAVE_GETZONEID) && defined(SHMPERM_ZONEID)
-	if ( ((lcc->fieldsSet & LCC_ZID_SET) == 0) || (lcc->zoneid == -1)
-	     || (lcc->zoneid != SHMPERM_ZONEID(perm))) {
-		uidset = 0;
-		gidset = 0;
-	}
-#endif
-	FreeLocalClientCreds(lcc);
-	
-	if (uidset) {
-	    /* User id 0 always gets access */
-	    if (uid == 0) {
-		return 0;
-	    }
-            #ifdef _MSC_VER
-            __asm int 3;
-            #else
-	    /* Check the owner */
-	    if (SHMPERM_UID(perm) == uid || SHMPERM_CUID(perm) == uid) {
-		mask = S_IRUSR;
-		if (!readonly) {
-		    mask |= S_IWUSR;
-		}
-		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;
-	    }
-            #endif
-	}
-
-	if (gidset) {
-	    /* Check the group */
-            #ifdef _MSC_VER
-            __asm int 3;
-            #else
-	    if (SHMPERM_GID(perm) == gid || SHMPERM_CGID(perm) == gid) {
-		mask = S_IRGRP;
-		if (!readonly) {
-		    mask |= S_IWGRP;
-		}
-		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;
-	    }
-            #endif
-	}
-    }
-            #ifdef _MSC_VER
-            __asm int 3;
-            return -1;
-            #else
-    /* Otherwise, check everyone else */
-    mask = S_IROTH;
-    if (!readonly) {
-	mask |= S_IWOTH;
-    }
-    return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;
-    #endif
-}
-
-static int
-ProcShmAttach(ClientPtr client)
-{
-    SHMSTAT_TYPE buf;
-    ShmDescPtr shmdesc;
-    REQUEST(xShmAttachReq);
-
-    REQUEST_SIZE_MATCH(xShmAttachReq);
-    LEGAL_NEW_RESOURCE(stuff->shmseg, client);
-    if ((stuff->readOnly != xTrue) && (stuff->readOnly != xFalse))
-    {
-	client->errorValue = stuff->readOnly;
-        return(BadValue);
-    }
-    for (shmdesc = Shmsegs;
-	 shmdesc && (shmdesc->shmid != stuff->shmid);
-	 shmdesc = shmdesc->next)
-	;
-    if (shmdesc)
-    {
-	if (!stuff->readOnly && !shmdesc->writable)
-	    return BadAccess;
-	shmdesc->refcnt++;
-    }
-    else
-    {
-	shmdesc = xalloc(sizeof(ShmDescRec));
-	if (!shmdesc)
-	    return BadAlloc;
-	shmdesc->addr = shmat(stuff->shmid, 0,
-			      stuff->readOnly ? SHM_RDONLY : 0);
-	if ((shmdesc->addr == ((char *)-1)) ||
-	    SHMSTAT(stuff->shmid, &buf))
-	{
-	    xfree(shmdesc);
-	    return BadAccess;
-	}
-
-	/* The attach was performed with root privs. We must
-	 * do manual checking of access rights for the credentials 
-	 * of the client */
-
-	if (shm_access(client, &(SHM_PERM(buf)), stuff->readOnly) == -1) {
-	    shmdt(shmdesc->addr);
-	    xfree(shmdesc);
-	    return BadAccess;
-	}
-
-	shmdesc->shmid = stuff->shmid;
-	shmdesc->refcnt = 1;
-	shmdesc->writable = !stuff->readOnly;
-	shmdesc->size = SHM_SEGSZ(buf);
-	shmdesc->next = Shmsegs;
-	Shmsegs = shmdesc;
-    }
-    if (!AddResource(stuff->shmseg, ShmSegType, (pointer)shmdesc))
-	return BadAlloc;
-    return(client->noClientException);
-}
-
-/*ARGSUSED*/
-static int
-ShmDetachSegment(pointer value, /* must conform to DeleteType */
-		 XID shmseg)
-{
-    ShmDescPtr shmdesc = (ShmDescPtr)value;
-    ShmDescPtr *prev;
-
-    if (--shmdesc->refcnt)
-	return TRUE;
-#ifndef _MSC_VER
-    shmdt(shmdesc->addr);
-#endif
-    for (prev = &Shmsegs; *prev != shmdesc; prev = &(*prev)->next)
-	;
-    *prev = shmdesc->next;
-    xfree(shmdesc);
-    return Success;
-}
-
-static int
-ProcShmDetach(ClientPtr client)
-{
-    ShmDescPtr shmdesc;
-    REQUEST(xShmDetachReq);
-
-    REQUEST_SIZE_MATCH(xShmDetachReq);
-    VERIFY_SHMSEG(stuff->shmseg, shmdesc, client);
-    FreeResource(stuff->shmseg, RT_NONE);
-    return(client->noClientException);
-}
-
-/*
- * If the given request doesn't exactly match PutImage's constraints,
- * wrap the image in a scratch pixmap header and let CopyArea sort it out.
- */
-static void
-doShmPutImage(DrawablePtr dst, GCPtr pGC,
-	      int depth, unsigned int format,
-	      int w, int h, int sx, int sy, int sw, int sh, int dx, int dy,
-	      char *data)
-{
-    PixmapPtr pPixmap;
-  
-    pPixmap = GetScratchPixmapHeader(dst->pScreen, w, h, depth,
-				     BitsPerPixel(depth),
-				     PixmapBytePad(w, depth),
-				     data);
-    if (!pPixmap)
-	return;
-    pGC->ops->CopyArea((DrawablePtr)pPixmap, dst, pGC, sx, sy, sw, sh, dx, dy);
-    FreeScratchPixmapHeader(pPixmap);
-}
-
-#ifdef PANORAMIX
-static int 
-ProcPanoramiXShmPutImage(ClientPtr client)
-{
-    int			 j, result, orig_x, orig_y;
-    PanoramiXRes	*draw, *gc;
-    Bool		 sendEvent, isRoot;
-
-    REQUEST(xShmPutImageReq);
-    REQUEST_SIZE_MATCH(xShmPutImageReq);
-
-    result = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,
-				      XRC_DRAWABLE, client, DixWriteAccess);
-    if (result != Success)
-        return (result == BadValue) ? BadDrawable : result;
-
-    result = dixLookupResourceByType((pointer *)&gc, stuff->gc,
-				     XRT_GC, client, DixReadAccess);
-    if (result != Success)
-        return (result == BadValue) ? BadGC : result;
-
-    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;
-
-    orig_x = stuff->dstX;
-    orig_y = stuff->dstY;
-    sendEvent = stuff->sendEvent;
-    stuff->sendEvent = 0;
-    FOR_NSCREENS(j) {
-	if(!j) stuff->sendEvent = sendEvent;
-	stuff->drawable = draw->info[j].id;
-	stuff->gc = gc->info[j].id;
-	if (isRoot) {
-	    stuff->dstX = orig_x - panoramiXdataPtr[j].x;
-	    stuff->dstY = orig_y - panoramiXdataPtr[j].y;
-	}
-	result = ProcShmPutImage(client);
-	if(result != client->noClientException) break;
-    }
-    return(result);
-}
-
-static int 
-ProcPanoramiXShmGetImage(ClientPtr client)
-{
-    PanoramiXRes	*draw;
-    DrawablePtr 	drawables[MAXSCREENS];
-    DrawablePtr 	pDraw;
-    xShmGetImageReply	xgi;
-    ShmDescPtr		shmdesc;
-    int         	i, x, y, w, h, format, rc;
-    Mask		plane = 0, planemask;
-    long		lenPer = 0, length, widthBytesLine;
-    Bool		isRoot;
-
-    REQUEST(xShmGetImageReq);
-
-    REQUEST_SIZE_MATCH(xShmGetImageReq);
-
-    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap)) {
-	client->errorValue = stuff->format;
-        return(BadValue);
-    }
-
-    rc = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,
-				  XRC_DRAWABLE, client, DixWriteAccess);
-    if (rc != Success)
-	return (rc == BadValue) ? BadDrawable : rc;
-
-    if (draw->type == XRT_PIXMAP)
-	return ProcShmGetImage(client);
-
-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,
-			   DixReadAccess);
-    if (rc != Success)
-	return rc;
-
-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
-
-    x = stuff->x;
-    y = stuff->y;
-    w = stuff->width;
-    h = stuff->height;
-    format = stuff->format;
-    planemask = stuff->planeMask;
-
-    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;
-
-    if(isRoot) {
-      if( /* check for being onscreen */
-	x < 0 || x + w > PanoramiXPixWidth ||
-	y < 0 || y + h > PanoramiXPixHeight )
-	    return(BadMatch);
-    } else {
-      if( /* check for being onscreen */
-	panoramiXdataPtr[0].x + pDraw->x + x < 0 ||
-	panoramiXdataPtr[0].x + pDraw->x + x + w > PanoramiXPixWidth ||
-        panoramiXdataPtr[0].y + pDraw->y + y < 0 ||
-	panoramiXdataPtr[0].y + pDraw->y + y + h > PanoramiXPixHeight ||
-	 /* check for being inside of border */
-       	x < - wBorderWidth((WindowPtr)pDraw) ||
-	x + w > wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||
-	y < -wBorderWidth((WindowPtr)pDraw) ||
-	y + h > wBorderWidth ((WindowPtr)pDraw) + (int)pDraw->height)
-	    return(BadMatch);
-    }
-
-    drawables[0] = pDraw;
-    for(i = 1; i < PanoramiXNumScreens; i++) {
-	rc = dixLookupDrawable(drawables+i, draw->info[i].id, client, 0, 
-			       DixReadAccess);
-	if (rc != Success)
-	    return rc;
-    }
-
-    xgi.visual = wVisual(((WindowPtr)pDraw));
-    xgi.type = X_Reply;
-    xgi.length = 0;
-    xgi.sequenceNumber = client->sequence;
-    xgi.depth = pDraw->depth;
-
-    if(format == ZPixmap) {
-	widthBytesLine = PixmapBytePad(w, pDraw->depth);
-	length = widthBytesLine * h;
-    } else {
-	widthBytesLine = PixmapBytePad(w, 1);
-	lenPer = widthBytesLine * h;
-	plane = ((Mask)1) << (pDraw->depth - 1);
-	length = lenPer * Ones(planemask & (plane | (plane - 1)));
-    }
-
-    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);
-    xgi.size = length;
-
-    if (length == 0) {/* nothing to do */ }
-    else if (format == ZPixmap) {
-	    XineramaGetImageData(drawables, x, y, w, h, format, planemask,
-					shmdesc->addr + stuff->offset,
-					widthBytesLine, isRoot);
-    } else {
-
-	length = stuff->offset;
-        for (; plane; plane >>= 1) {
-	    if (planemask & plane) {
-		XineramaGetImageData(drawables, x, y, w, h, 
-				     format, plane, shmdesc->addr + length,
-				     widthBytesLine, isRoot);
-		length += lenPer;
-	    }
-	}
-    }
-    
-    if (client->swapped) {
-	int n;
-    	swaps(&xgi.sequenceNumber, n);
-    	swapl(&xgi.length, n);
-	swapl(&xgi.visual, n);
-	swapl(&xgi.size, n);
-    }
-    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);
-
-    return(client->noClientException);
-}
-
-static int
-ProcPanoramiXShmCreatePixmap(ClientPtr client)
-{
-    ScreenPtr pScreen = NULL;
-    PixmapPtr pMap = NULL;
-    DrawablePtr pDraw;
-    DepthPtr pDepth;
-    int i, j, result, rc;
-    ShmDescPtr shmdesc;
-    REQUEST(xShmCreatePixmapReq);
-    unsigned int width, height, depth;
-    unsigned long size;
-    PanoramiXRes *newPix;
-
-    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);
-    client->errorValue = stuff->pid;
-    if (!sharedPixmaps)
-	return BadImplementation;
-    LEGAL_NEW_RESOURCE(stuff->pid, client);
-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,
-			   DixGetAttrAccess);
-    if (rc != Success)
-	return rc;
-
-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
-
-    width = stuff->width;
-    height = stuff->height;
-    depth = stuff->depth;
-    if (!width || !height || !depth)
-    {
-	client->errorValue = 0;
-        return BadValue;
-    }
-    if (width > 32767 || height > 32767)
-        return BadAlloc;
-
-    if (stuff->depth != 1)
-    {
-        pDepth = pDraw->pScreen->allowedDepths;
-        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)
-	   if (pDepth->depth == stuff->depth)
-               goto CreatePmap;
-	client->errorValue = stuff->depth;
-        return BadValue;
-    }
-
-CreatePmap:
-    size = PixmapBytePad(width, depth) * height;
-    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {
-        if (size < width * height)
-            return BadAlloc;
-    }
-    /* thankfully, offset is unsigned */
-    if (stuff->offset + size < size)
-	return BadAlloc;
-
-    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);
-
-    if(!(newPix = xalloc(sizeof(PanoramiXRes))))
-	return BadAlloc;
-
-    newPix->type = XRT_PIXMAP;
-    newPix->u.pix.shared = TRUE;
-    newPix->info[0].id = stuff->pid;
-    for(j = 1; j < PanoramiXNumScreens; j++)
-	newPix->info[j].id = FakeClientID(client->index);
-
-    result = (client->noClientException);
-
-    FOR_NSCREENS(j) {
-	pScreen = screenInfo.screens[j];
-
-	pMap = (*shmFuncs[j]->CreatePixmap)(pScreen, 
-				stuff->width, stuff->height, stuff->depth,
-				shmdesc->addr + stuff->offset);
-
-	if (pMap) {
-	    dixSetPrivate(&pMap->devPrivates, shmPixmapPrivate, shmdesc);
-            shmdesc->refcnt++;
-	    pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;
-	    pMap->drawable.id = newPix->info[j].id;
-	    if (!AddResource(newPix->info[j].id, RT_PIXMAP, (pointer)pMap)) {
-		(*pScreen->DestroyPixmap)(pMap);
-		result = BadAlloc;
-		break;
-	    }
-	} else {
-	   result = BadAlloc;
-	   break;
-	}
-    }
-
-    if(result == BadAlloc) {
-	while(j--) {
-	    (*pScreen->DestroyPixmap)(pMap);
-	    FreeResource(newPix->info[j].id, RT_NONE);
-	}
-	xfree(newPix);
-    } else 
-	AddResource(stuff->pid, XRT_PIXMAP, newPix);
-
-    return result;
-}
-
-#endif
-
-static int
-ProcShmPutImage(ClientPtr client)
-{
-    GCPtr pGC;
-    DrawablePtr pDraw;
-    long length;
-    ShmDescPtr shmdesc;
-    REQUEST(xShmPutImageReq);
-
-    REQUEST_SIZE_MATCH(xShmPutImageReq);
-    VALIDATE_DRAWABLE_AND_GC(stuff->drawable, pDraw, DixWriteAccess);
-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, FALSE, shmdesc, client);
-    if ((stuff->sendEvent != xTrue) && (stuff->sendEvent != xFalse))
-	return BadValue;
-    if (stuff->format == XYBitmap)
-    {
-        if (stuff->depth != 1)
-            return BadMatch;
-        length = PixmapBytePad(stuff->totalWidth, 1);
-    }
-    else if (stuff->format == XYPixmap)
-    {
-        if (pDraw->depth != stuff->depth)
-            return BadMatch;
-        length = PixmapBytePad(stuff->totalWidth, 1);
-	length *= stuff->depth;
-    }
-    else if (stuff->format == ZPixmap)
-    {
-        if (pDraw->depth != stuff->depth)
-            return BadMatch;
-        length = PixmapBytePad(stuff->totalWidth, stuff->depth);
-    }
-    else
-    {
-	client->errorValue = stuff->format;
-        return BadValue;
-    }
-
-    /* 
-     * There's a potential integer overflow in this check:
-     * VERIFY_SHMSIZE(shmdesc, stuff->offset, length * stuff->totalHeight,
-     *                client);
-     * the version below ought to avoid it
-     */
-    if (stuff->totalHeight != 0 && 
-	length > (shmdesc->size - stuff->offset)/stuff->totalHeight) {
-	client->errorValue = stuff->totalWidth;
-	return BadValue;
-    }
-    if (stuff->srcX > stuff->totalWidth)
-    {
-	client->errorValue = stuff->srcX;
-	return BadValue;
-    }
-    if (stuff->srcY > stuff->totalHeight)
-    {
-	client->errorValue = stuff->srcY;
-	return BadValue;
-    }
-    if ((stuff->srcX + stuff->srcWidth) > stuff->totalWidth)
-    {
-	client->errorValue = stuff->srcWidth;
-	return BadValue;
-    }
-    if ((stuff->srcY + stuff->srcHeight) > stuff->totalHeight)
-    {
-	client->errorValue = stuff->srcHeight;
-	return BadValue;
-    }
-
-    if ((((stuff->format == ZPixmap) && (stuff->srcX == 0)) ||
-	 ((stuff->format != ZPixmap) &&
-	  (stuff->srcX < screenInfo.bitmapScanlinePad) &&
-	  ((stuff->format == XYBitmap) ||
-	   ((stuff->srcY == 0) &&
-	    (stuff->srcHeight == stuff->totalHeight))))) &&
-	((stuff->srcX + stuff->srcWidth) == stuff->totalWidth))
-	(*pGC->ops->PutImage) (pDraw, pGC, stuff->depth,
-			       stuff->dstX, stuff->dstY,
-			       stuff->totalWidth, stuff->srcHeight, 
-			       stuff->srcX, stuff->format, 
-			       shmdesc->addr + stuff->offset +
-			       (stuff->srcY * length));
-    else
-	doShmPutImage(pDraw, pGC, stuff->depth, stuff->format,
-		      stuff->totalWidth, stuff->totalHeight,
-		      stuff->srcX, stuff->srcY,
-		      stuff->srcWidth, stuff->srcHeight,
-		      stuff->dstX, stuff->dstY,
-                      shmdesc->addr + stuff->offset);
-
-    if (stuff->sendEvent)
-    {
-	xShmCompletionEvent ev;
-
-	ev.type = ShmCompletionCode;
-	ev.drawable = stuff->drawable;
-	ev.sequenceNumber = client->sequence;
-	ev.minorEvent = X_ShmPutImage;
-	ev.majorEvent = ShmReqCode;
-	ev.shmseg = stuff->shmseg;
-	ev.offset = stuff->offset;
-	WriteEventsToClient(client, 1, (xEvent *) &ev);
-    }
-
-    return (client->noClientException);
-}
-
-
-
-static int
-ProcShmGetImage(ClientPtr client)
-{
-    DrawablePtr		pDraw;
-    long		lenPer = 0, length;
-    Mask		plane = 0;
-    xShmGetImageReply	xgi;
-    ShmDescPtr		shmdesc;
-    int			n, rc;
-
-    REQUEST(xShmGetImageReq);
-
-    REQUEST_SIZE_MATCH(xShmGetImageReq);
-    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap))
-    {
-	client->errorValue = stuff->format;
-        return(BadValue);
-    }
-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,
-			   DixReadAccess);
-    if (rc != Success)
-	return rc;
-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
-    if (pDraw->type == DRAWABLE_WINDOW)
-    {
-      if( /* check for being viewable */
-	 !((WindowPtr) pDraw)->realized ||
-	  /* check for being on screen */
-         pDraw->x + stuff->x < 0 ||
- 	 pDraw->x + stuff->x + (int)stuff->width > pDraw->pScreen->width ||
-         pDraw->y + stuff->y < 0 ||
-         pDraw->y + stuff->y + (int)stuff->height > pDraw->pScreen->height ||
-          /* check for being inside of border */
-         stuff->x < - wBorderWidth((WindowPtr)pDraw) ||
-         stuff->x + (int)stuff->width >
-		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||
-         stuff->y < -wBorderWidth((WindowPtr)pDraw) ||
-         stuff->y + (int)stuff->height >
-		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->height
-        )
-	    return(BadMatch);
-	xgi.visual = wVisual(((WindowPtr)pDraw));
-    }
-    else
-    {
-	if (stuff->x < 0 ||
-	    stuff->x+(int)stuff->width > pDraw->width ||
-	    stuff->y < 0 ||
-	    stuff->y+(int)stuff->height > pDraw->height
-	    )
-	    return(BadMatch);
-	xgi.visual = None;
-    }
-    xgi.type = X_Reply;
-    xgi.length = 0;
-    xgi.sequenceNumber = client->sequence;
-    xgi.depth = pDraw->depth;
-    if(stuff->format == ZPixmap)
-    {
-	length = PixmapBytePad(stuff->width, pDraw->depth) * stuff->height;
-    }
-    else 
-    {
-	lenPer = PixmapBytePad(stuff->width, 1) * stuff->height;
-	plane = ((Mask)1) << (pDraw->depth - 1);
-	/* only planes asked for */
-	length = lenPer * Ones(stuff->planeMask & (plane | (plane - 1)));
-    }
-
-    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);
-    xgi.size = length;
-
-    if (length == 0)
-    {
-	/* nothing to do */
-    }
-    else if (stuff->format == ZPixmap)
-    {
-	(*pDraw->pScreen->GetImage)(pDraw, stuff->x, stuff->y,
-				    stuff->width, stuff->height,
-				    stuff->format, stuff->planeMask,
-				    shmdesc->addr + stuff->offset);
-    }
-    else
-    {
-
-	length = stuff->offset;
-        for (; plane; plane >>= 1)
-	{
-	    if (stuff->planeMask & plane)
-	    {
-		(*pDraw->pScreen->GetImage)(pDraw,
-					    stuff->x, stuff->y,
-					    stuff->width, stuff->height,
-					    stuff->format, plane,
-					    shmdesc->addr + length);
-		length += lenPer;
-	    }
-	}
-    }
-    
-    if (client->swapped) {
-    	swaps(&xgi.sequenceNumber, n);
-    	swapl(&xgi.length, n);
-	swapl(&xgi.visual, n);
-	swapl(&xgi.size, n);
-    }
-    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);
-
-    return(client->noClientException);
-}
-
-static PixmapPtr
-fbShmCreatePixmap (ScreenPtr pScreen,
-		   int width, int height, int depth, char *addr)
-{
-    PixmapPtr pPixmap;
-
-    pPixmap = (*pScreen->CreatePixmap)(pScreen, 0, 0, pScreen->rootDepth, 0);
-    if (!pPixmap)
-	return NullPixmap;
-
-    if (!(*pScreen->ModifyPixmapHeader)(pPixmap, width, height, depth,
-	    BitsPerPixel(depth), PixmapBytePad(width, depth), (pointer)addr)) {
-	(*pScreen->DestroyPixmap)(pPixmap);
-	return NullPixmap;
-    }
-    return pPixmap;
-}
-
-static int
-ProcShmCreatePixmap(ClientPtr client)
-{
-    PixmapPtr pMap;
-    DrawablePtr pDraw;
-    DepthPtr pDepth;
-    int i, rc;
-    ShmDescPtr shmdesc;
-    REQUEST(xShmCreatePixmapReq);
-    unsigned int width, height, depth;
-    unsigned long size;
-
-    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);
-    client->errorValue = stuff->pid;
-    if (!sharedPixmaps)
-	return BadImplementation;
-    LEGAL_NEW_RESOURCE(stuff->pid, client);
-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,
-			   DixGetAttrAccess);
-    if (rc != Success)
-	return rc;
-
-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
-    
-    width = stuff->width;
-    height = stuff->height;
-    depth = stuff->depth;
-    if (!width || !height || !depth)
-    {
-	client->errorValue = 0;
-        return BadValue;
-    }
-    if (width > 32767 || height > 32767)
-	return BadAlloc;
-
-    if (stuff->depth != 1)
-    {
-        pDepth = pDraw->pScreen->allowedDepths;
-        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)
-	   if (pDepth->depth == stuff->depth)
-               goto CreatePmap;
-	client->errorValue = stuff->depth;
-        return BadValue;
-    }
-
-CreatePmap:
-    size = PixmapBytePad(width, depth) * height;
-    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {
-	if (size < width * height)
-	    return BadAlloc;
-    }
-    /* thankfully, offset is unsigned */
-    if (stuff->offset + size < size)
-	return BadAlloc;
-
-    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);
-    pMap = (*shmFuncs[pDraw->pScreen->myNum]->CreatePixmap)(
-			    pDraw->pScreen, stuff->width,
-			    stuff->height, stuff->depth,
-			    shmdesc->addr + stuff->offset);
-    if (pMap)
-    {
-	rc = XaceHook(XACE_RESOURCE_ACCESS, client, stuff->pid, RT_PIXMAP,
-		      pMap, RT_NONE, NULL, DixCreateAccess);
-	if (rc != Success) {
-	    pDraw->pScreen->DestroyPixmap(pMap);
-	    return rc;
-	}
-	dixSetPrivate(&pMap->devPrivates, shmPixmapPrivate, shmdesc);
-	shmdesc->refcnt++;
-	pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;
-	pMap->drawable.id = stuff->pid;
-	if (AddResource(stuff->pid, RT_PIXMAP, (pointer)pMap))
-	{
-	    return(client->noClientException);
-	}
-	pDraw->pScreen->DestroyPixmap(pMap);
-    }
-    return (BadAlloc);
-}
-
-static int
-ProcShmDispatch (ClientPtr client)
-{
-    REQUEST(xReq);
-    switch (stuff->data)
-    {
-    case X_ShmQueryVersion:
-	return ProcShmQueryVersion(client);
-    case X_ShmAttach:
-	return ProcShmAttach(client);
-    case X_ShmDetach:
-	return ProcShmDetach(client);
-    case X_ShmPutImage:
-#ifdef PANORAMIX
-        if ( !noPanoramiXExtension )
-	   return ProcPanoramiXShmPutImage(client);
-#endif
-	return ProcShmPutImage(client);
-    case X_ShmGetImage:
-#ifdef PANORAMIX
-        if ( !noPanoramiXExtension )
-	   return ProcPanoramiXShmGetImage(client);
-#endif
-	return ProcShmGetImage(client);
-    case X_ShmCreatePixmap:
-#ifdef PANORAMIX
-        if ( !noPanoramiXExtension )
-	   return ProcPanoramiXShmCreatePixmap(client);
-#endif
-	   return ProcShmCreatePixmap(client);
-    default:
-	return BadRequest;
-    }
-}
-
-static void
-SShmCompletionEvent(xShmCompletionEvent *from, xShmCompletionEvent *to)
-{
-    to->type = from->type;
-    cpswaps(from->sequenceNumber, to->sequenceNumber);
-    cpswapl(from->drawable, to->drawable);
-    cpswaps(from->minorEvent, to->minorEvent);
-    to->majorEvent = from->majorEvent;
-    cpswapl(from->shmseg, to->shmseg);
-    cpswapl(from->offset, to->offset);
-}
-
-static int
-SProcShmQueryVersion(ClientPtr client)
-{
-    int n;
-    REQUEST(xShmQueryVersionReq);
-
-    swaps(&stuff->length, n);
-    return ProcShmQueryVersion(client);
-}
-
-static int
-SProcShmAttach(ClientPtr client)
-{
-    int n;
-    REQUEST(xShmAttachReq);
-    swaps(&stuff->length, n);
-    REQUEST_SIZE_MATCH(xShmAttachReq);
-    swapl(&stuff->shmseg, n);
-    swapl(&stuff->shmid, n);
-    return ProcShmAttach(client);
-}
-
-static int
-SProcShmDetach(ClientPtr client)
-{
-    int n;
-    REQUEST(xShmDetachReq);
-    swaps(&stuff->length, n);
-    REQUEST_SIZE_MATCH(xShmDetachReq);
-    swapl(&stuff->shmseg, n);
-    return ProcShmDetach(client);
-}
-
-static int
-SProcShmPutImage(ClientPtr client)
-{
-    int n;
-    REQUEST(xShmPutImageReq);
-    swaps(&stuff->length, n);
-    REQUEST_SIZE_MATCH(xShmPutImageReq);
-    swapl(&stuff->drawable, n);
-    swapl(&stuff->gc, n);
-    swaps(&stuff->totalWidth, n);
-    swaps(&stuff->totalHeight, n);
-    swaps(&stuff->srcX, n);
-    swaps(&stuff->srcY, n);
-    swaps(&stuff->srcWidth, n);
-    swaps(&stuff->srcHeight, n);
-    swaps(&stuff->dstX, n);
-    swaps(&stuff->dstY, n);
-    swapl(&stuff->shmseg, n);
-    swapl(&stuff->offset, n);
-    return ProcShmPutImage(client);
-}
-
-static int
-SProcShmGetImage(ClientPtr client)
-{
-    int n;
-    REQUEST(xShmGetImageReq);
-    swaps(&stuff->length, n);
-    REQUEST_SIZE_MATCH(xShmGetImageReq);
-    swapl(&stuff->drawable, n);
-    swaps(&stuff->x, n);
-    swaps(&stuff->y, n);
-    swaps(&stuff->width, n);
-    swaps(&stuff->height, n);
-    swapl(&stuff->planeMask, n);
-    swapl(&stuff->shmseg, n);
-    swapl(&stuff->offset, n);
-    return ProcShmGetImage(client);
-}
-
-static int
-SProcShmCreatePixmap(ClientPtr client)
-{
-    int n;
-    REQUEST(xShmCreatePixmapReq);
-    swaps(&stuff->length, n);
-    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);
-    swapl(&stuff->pid, n);
-    swapl(&stuff->drawable, n);
-    swaps(&stuff->width, n);
-    swaps(&stuff->height, n);
-    swapl(&stuff->shmseg, n);
-    swapl(&stuff->offset, n);
-    return ProcShmCreatePixmap(client);
-}
-
-static int
-SProcShmDispatch (ClientPtr client)
-{
-    REQUEST(xReq);
-    switch (stuff->data)
-    {
-    case X_ShmQueryVersion:
-	return SProcShmQueryVersion(client);
-    case X_ShmAttach:
-	return SProcShmAttach(client);
-    case X_ShmDetach:
-	return SProcShmDetach(client);
-    case X_ShmPutImage:
-	return SProcShmPutImage(client);
-    case X_ShmGetImage:
-	return SProcShmGetImage(client);
-    case X_ShmCreatePixmap:
-	return SProcShmCreatePixmap(client);
-    default:
-	return BadRequest;
-    }
-}
+/************************************************************

+

+Copyright 1989, 1998  The Open Group

+

+Permission to use, copy, modify, distribute, and sell this software and its

+documentation for any purpose is hereby granted without fee, provided that

+the above copyright notice appear in all copies and that both that

+copyright notice and this permission notice appear in supporting

+documentation.

+

+The above copyright notice and this permission notice shall be included in

+all copies or substantial portions of the Software.

+

+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE

+OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN

+AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN

+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

+

+Except as contained in this notice, the name of The Open Group shall not be

+used in advertising or otherwise to promote the sale, use or other dealings

+in this Software without prior written authorization from The Open Group.

+

+********************************************************/

+

+/* THIS IS NOT AN X CONSORTIUM STANDARD OR AN X PROJECT TEAM SPECIFICATION */

+

+

+#define SHM

+

+#ifdef HAVE_DIX_CONFIG_H

+#include <dix-config.h>

+#endif

+

+#include <sys/types.h>

+#if !defined(_MSC_VER)

+#include <sys/ipc.h>

+#include <sys/shm.h>

+#endif

+#include <unistd.h>

+#include <sys/stat.h>

+#include <X11/X.h>

+#include <X11/Xproto.h>

+#include "misc.h"

+#include "os.h"

+#include "dixstruct.h"

+#include "resource.h"

+#include "scrnintstr.h"

+#include "windowstr.h"

+#include "pixmapstr.h"

+#include "gcstruct.h"

+#include "extnsionst.h"

+#include "servermd.h"

+#include "shmint.h"

+#include "xace.h"

+#include <X11/extensions/shmproto.h>

+#include <X11/Xfuncproto.h>

+#include "protocol-versions.h"

+

+/* Needed for Solaris cross-zone shared memory extension */

+#ifdef HAVE_SHMCTL64

+#include <sys/ipc_impl.h>

+#define SHMSTAT(id, buf)	shmctl64(id, IPC_STAT64, buf)

+#define SHMSTAT_TYPE 		struct shmid_ds64

+#define SHMPERM_TYPE 		struct ipc_perm64

+#define SHM_PERM(buf) 		buf.shmx_perm

+#define SHM_SEGSZ(buf)		buf.shmx_segsz

+#define SHMPERM_UID(p)		p->ipcx_uid

+#define SHMPERM_CUID(p)		p->ipcx_cuid

+#define SHMPERM_GID(p)		p->ipcx_gid

+#define SHMPERM_CGID(p)		p->ipcx_cgid

+#define SHMPERM_MODE(p)		p->ipcx_mode

+#define SHMPERM_ZONEID(p)	p->ipcx_zoneid

+#else

+#define SHMSTAT(id, buf) 	shmctl(id, IPC_STAT, buf)

+#define SHMSTAT_TYPE 		struct shmid_ds

+#define SHMPERM_TYPE 		struct ipc_perm

+#define SHM_PERM(buf) 		buf.shm_perm

+#define SHM_SEGSZ(buf)		buf.shm_segsz

+#define SHMPERM_UID(p)		p->uid

+#define SHMPERM_CUID(p)		p->cuid

+#define SHMPERM_GID(p)		p->gid

+#define SHMPERM_CGID(p)		p->cgid

+#define SHMPERM_MODE(p)		p->mode

+#endif

+

+#ifdef PANORAMIX

+#include "panoramiX.h"

+#include "panoramiXsrv.h"

+#endif

+

+#include "modinit.h"

+

+typedef struct _ShmDesc {

+    struct _ShmDesc *next;

+    int shmid;

+    int refcnt;

+    char *addr;

+    Bool writable;

+    unsigned long size;

+} ShmDescRec, *ShmDescPtr;

+

+static PixmapPtr fbShmCreatePixmap(XSHM_CREATE_PIXMAP_ARGS);

+static int ShmDetachSegment(

+    pointer		/* value */,

+    XID			/* shmseg */

+    );

+static void ShmResetProc(

+    ExtensionEntry *	/* extEntry */

+    );

+static void SShmCompletionEvent(

+    xShmCompletionEvent * /* from */,

+    xShmCompletionEvent * /* to */

+    );

+

+static Bool ShmDestroyPixmap (PixmapPtr pPixmap);

+

+static DISPATCH_PROC(ProcShmAttach);

+static DISPATCH_PROC(ProcShmCreatePixmap);

+static DISPATCH_PROC(ProcShmDetach);

+static DISPATCH_PROC(ProcShmDispatch);

+static DISPATCH_PROC(ProcShmGetImage);

+static DISPATCH_PROC(ProcShmPutImage);

+static DISPATCH_PROC(ProcShmQueryVersion);

+static DISPATCH_PROC(SProcShmAttach);

+static DISPATCH_PROC(SProcShmCreatePixmap);

+static DISPATCH_PROC(SProcShmDetach);

+static DISPATCH_PROC(SProcShmDispatch);

+static DISPATCH_PROC(SProcShmGetImage);

+static DISPATCH_PROC(SProcShmPutImage);

+static DISPATCH_PROC(SProcShmQueryVersion);

+

+static unsigned char ShmReqCode;

+int ShmCompletionCode;

+int BadShmSegCode;

+RESTYPE ShmSegType;

+static ShmDescPtr Shmsegs;

+static Bool sharedPixmaps;

+static ShmFuncsPtr shmFuncs[MAXSCREENS];

+static DestroyPixmapProcPtr destroyPixmap[MAXSCREENS];

+static int shmPixmapPrivateIndex;

+static DevPrivateKey shmPixmapPrivate = &shmPixmapPrivateIndex;

+static ShmFuncs miFuncs = {NULL, NULL};

+static ShmFuncs fbFuncs = {fbShmCreatePixmap, NULL};

+

+#define VERIFY_SHMSEG(shmseg,shmdesc,client) \

+{ \

+    int rc; \

+    rc = dixLookupResourceByType((pointer *)&(shmdesc), shmseg, ShmSegType, \

+                                 client, DixReadAccess); \

+    if (rc != Success) \

+	return (rc == BadValue) ? BadShmSegCode : rc; \

+}

+

+#define VERIFY_SHMPTR(shmseg,offset,needwrite,shmdesc,client) \

+{ \

+    VERIFY_SHMSEG(shmseg, shmdesc, client); \

+    if ((offset & 3) || (offset > shmdesc->size)) \

+    { \

+	client->errorValue = offset; \

+	return BadValue; \

+    } \

+    if (needwrite && !shmdesc->writable) \

+	return BadAccess; \

+}

+

+#define VERIFY_SHMSIZE(shmdesc,offset,len,client) \

+{ \

+    if ((offset + len) > shmdesc->size) \

+    { \

+	return BadAccess; \

+    } \

+}

+

+

+#if defined(__FreeBSD__) || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__CYGWIN__) || defined(__DragonFly__)

+#include <sys/signal.h>

+

+static Bool badSysCall = FALSE;

+

+static void

+SigSysHandler(int signo)

+{

+    badSysCall = TRUE;

+}

+

+static Bool CheckForShmSyscall(void)

+{

+    void (*oldHandler)();

+    int shmid = -1;

+

+    /* If no SHM support in the kernel, the bad syscall will generate SIGSYS */

+    oldHandler = signal(SIGSYS, SigSysHandler);

+

+    badSysCall = FALSE;

+    shmid = shmget(IPC_PRIVATE, 4096, IPC_CREAT);

+

+    if (shmid != -1)

+    {

+        /* Successful allocation - clean up */

+	shmctl(shmid, IPC_RMID, NULL);

+    }

+    else

+    {

+        /* Allocation failed */

+        badSysCall = TRUE;

+    }

+    signal(SIGSYS, oldHandler);

+    return(!badSysCall);

+}

+

+#define MUST_CHECK_FOR_SHM_SYSCALL

+

+#endif

+

+void

+ShmExtensionInit(INITARGS)

+{

+    ExtensionEntry *extEntry;

+    int i;

+

+#ifdef MUST_CHECK_FOR_SHM_SYSCALL

+    if (!CheckForShmSyscall())

+    {

+	ErrorF("MIT-SHM extension disabled due to lack of kernel support\n");

+	return;

+    }

+#endif

+

+    sharedPixmaps = xFalse;

+    {

+      sharedPixmaps = xTrue;

+      for (i = 0; i < screenInfo.numScreens; i++)

+      {

+	if (!shmFuncs[i])

+	    shmFuncs[i] = &miFuncs;

+	if (!shmFuncs[i]->CreatePixmap)

+	    sharedPixmaps = xFalse;

+      }

+      if (sharedPixmaps)

+	for (i = 0; i < screenInfo.numScreens; i++)

+	{

+	    destroyPixmap[i] = screenInfo.screens[i]->DestroyPixmap;

+	    screenInfo.screens[i]->DestroyPixmap = ShmDestroyPixmap;

+	}

+    }

+    ShmSegType = CreateNewResourceType(ShmDetachSegment);

+    if (ShmSegType &&

+	(extEntry = AddExtension(SHMNAME, ShmNumberEvents, ShmNumberErrors,

+				 ProcShmDispatch, SProcShmDispatch,

+				 ShmResetProc, StandardMinorOpcode)))

+    {

+	ShmReqCode = (unsigned char)extEntry->base;

+	ShmCompletionCode = extEntry->eventBase;

+	BadShmSegCode = extEntry->errorBase;

+	EventSwapVector[ShmCompletionCode] = (EventSwapPtr) SShmCompletionEvent;

+    }

+}

+

+/*ARGSUSED*/

+static void

+ShmResetProc(ExtensionEntry *extEntry)

+{

+    int i;

+

+    for (i = 0; i < MAXSCREENS; i++)

+    {

+	shmFuncs[i] = NULL;

+    }

+}

+

+void

+ShmRegisterFuncs(ScreenPtr pScreen, ShmFuncsPtr funcs)

+{

+    shmFuncs[pScreen->myNum] = funcs;

+}

+

+static Bool

+ShmDestroyPixmap (PixmapPtr pPixmap)

+{

+    ScreenPtr	    pScreen = pPixmap->drawable.pScreen;

+    Bool	    ret;

+    if (pPixmap->refcnt == 1)

+    {

+	ShmDescPtr  shmdesc;

+	shmdesc = (ShmDescPtr)dixLookupPrivate(&pPixmap->devPrivates,

+					       shmPixmapPrivate);

+	if (shmdesc)

+	    ShmDetachSegment ((pointer) shmdesc, pPixmap->drawable.id);

+    }

+    

+    pScreen->DestroyPixmap = destroyPixmap[pScreen->myNum];

+    ret = (*pScreen->DestroyPixmap) (pPixmap);

+    destroyPixmap[pScreen->myNum] = pScreen->DestroyPixmap;

+    pScreen->DestroyPixmap = ShmDestroyPixmap;

+    return ret;

+}

+

+void

+ShmRegisterFbFuncs(ScreenPtr pScreen)

+{

+    shmFuncs[pScreen->myNum] = &fbFuncs;

+}

+

+static int

+ProcShmQueryVersion(ClientPtr client)

+{

+    xShmQueryVersionReply rep;

+    int n;

+

+    REQUEST_SIZE_MATCH(xShmQueryVersionReq);

+    memset(&rep, 0, sizeof(xShmQueryVersionReply));

+    rep.type = X_Reply;

+    rep.length = 0;

+    rep.sequenceNumber = client->sequence;

+    rep.sharedPixmaps = sharedPixmaps;

+    rep.pixmapFormat = sharedPixmaps ? ZPixmap : 0;

+    rep.majorVersion = SERVER_SHM_MAJOR_VERSION;

+    rep.minorVersion = SERVER_SHM_MINOR_VERSION;

+#ifndef _MSC_VER

+    rep.uid = geteuid();

+    rep.gid = getegid();

+#endif

+    if (client->swapped) {

+    	swaps(&rep.sequenceNumber, n);

+    	swapl(&rep.length, n);

+	swaps(&rep.majorVersion, n);

+	swaps(&rep.minorVersion, n);

+	swaps(&rep.uid, n);

+	swaps(&rep.gid, n);

+    }

+    WriteToClient(client, sizeof(xShmQueryVersionReply), (char *)&rep);

+    return (client->noClientException);

+}

+

+/*

+ * Simulate the access() system call for a shared memory segement,

+ * using the credentials from the client if available

+ */

+static int

+shm_access(ClientPtr client, SHMPERM_TYPE *perm, int readonly)

+{

+    int uid, gid;

+    mode_t mask;

+    int uidset = 0, gidset = 0;

+    LocalClientCredRec *lcc;

+    

+    if (GetLocalClientCreds(client, &lcc) != -1) {

+

+	if (lcc->fieldsSet & LCC_UID_SET) {

+	    uid = lcc->euid;

+	    uidset = 1;

+	}

+	if (lcc->fieldsSet & LCC_GID_SET) {

+	    gid = lcc->egid;

+	    gidset = 1;

+	}

+

+#if defined(HAVE_GETZONEID) && defined(SHMPERM_ZONEID)

+	if ( ((lcc->fieldsSet & LCC_ZID_SET) == 0) || (lcc->zoneid == -1)

+	     || (lcc->zoneid != SHMPERM_ZONEID(perm))) {

+		uidset = 0;

+		gidset = 0;

+	}

+#endif

+	FreeLocalClientCreds(lcc);

+	

+	if (uidset) {

+	    /* User id 0 always gets access */

+	    if (uid == 0) {

+		return 0;

+	    }

+            #ifdef _MSC_VER

+            __asm int 3;

+            #else

+	    /* Check the owner */

+	    if (SHMPERM_UID(perm) == uid || SHMPERM_CUID(perm) == uid) {

+		mask = S_IRUSR;

+		if (!readonly) {

+		    mask |= S_IWUSR;

+		}

+		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;

+	    }

+            #endif

+	}

+

+	if (gidset) {

+	    /* Check the group */

+            #ifdef _MSC_VER

+            __asm int 3;

+            #else

+	    if (SHMPERM_GID(perm) == gid || SHMPERM_CGID(perm) == gid) {

+		mask = S_IRGRP;

+		if (!readonly) {

+		    mask |= S_IWGRP;

+		}

+		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;

+	    }

+            #endif

+	}

+    }

+            #ifdef _MSC_VER

+            __asm int 3;

+            return -1;

+            #else

+    /* Otherwise, check everyone else */

+    mask = S_IROTH;

+    if (!readonly) {

+	mask |= S_IWOTH;

+    }

+    return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;

+    #endif

+}

+

+static int

+ProcShmAttach(ClientPtr client)

+{

+    SHMSTAT_TYPE buf;

+    ShmDescPtr shmdesc;

+    REQUEST(xShmAttachReq);

+

+    REQUEST_SIZE_MATCH(xShmAttachReq);

+    LEGAL_NEW_RESOURCE(stuff->shmseg, client);

+    if ((stuff->readOnly != xTrue) && (stuff->readOnly != xFalse))

+    {

+	client->errorValue = stuff->readOnly;

+        return(BadValue);

+    }

+    for (shmdesc = Shmsegs;

+	 shmdesc && (shmdesc->shmid != stuff->shmid);

+	 shmdesc = shmdesc->next)

+	;

+    if (shmdesc)

+    {

+	if (!stuff->readOnly && !shmdesc->writable)

+	    return BadAccess;

+	shmdesc->refcnt++;

+    }

+    else

+    {

+	shmdesc = xalloc(sizeof(ShmDescRec));

+	if (!shmdesc)

+	    return BadAlloc;

+	shmdesc->addr = shmat(stuff->shmid, 0,

+			      stuff->readOnly ? SHM_RDONLY : 0);

+	if ((shmdesc->addr == ((char *)-1)) ||

+	    SHMSTAT(stuff->shmid, &buf))

+	{

+	    xfree(shmdesc);

+	    return BadAccess;

+	}

+

+	/* The attach was performed with root privs. We must

+	 * do manual checking of access rights for the credentials 

+	 * of the client */

+

+	if (shm_access(client, &(SHM_PERM(buf)), stuff->readOnly) == -1) {

+	    shmdt(shmdesc->addr);

+	    xfree(shmdesc);

+	    return BadAccess;

+	}

+

+	shmdesc->shmid = stuff->shmid;

+	shmdesc->refcnt = 1;

+	shmdesc->writable = !stuff->readOnly;

+	shmdesc->size = SHM_SEGSZ(buf);

+	shmdesc->next = Shmsegs;

+	Shmsegs = shmdesc;

+    }

+    if (!AddResource(stuff->shmseg, ShmSegType, (pointer)shmdesc))

+	return BadAlloc;

+    return(client->noClientException);

+}

+

+/*ARGSUSED*/

+static int

+ShmDetachSegment(pointer value, /* must conform to DeleteType */

+		 XID shmseg)

+{

+    ShmDescPtr shmdesc = (ShmDescPtr)value;

+    ShmDescPtr *prev;

+

+    if (--shmdesc->refcnt)

+	return TRUE;

+#ifndef _MSC_VER

+    shmdt(shmdesc->addr);

+#endif

+    for (prev = &Shmsegs; *prev != shmdesc; prev = &(*prev)->next)

+	;

+    *prev = shmdesc->next;

+    xfree(shmdesc);

+    return Success;

+}

+

+static int

+ProcShmDetach(ClientPtr client)

+{

+    ShmDescPtr shmdesc;

+    REQUEST(xShmDetachReq);

+

+    REQUEST_SIZE_MATCH(xShmDetachReq);

+    VERIFY_SHMSEG(stuff->shmseg, shmdesc, client);

+    FreeResource(stuff->shmseg, RT_NONE);

+    return(client->noClientException);

+}

+

+/*

+ * If the given request doesn't exactly match PutImage's constraints,

+ * wrap the image in a scratch pixmap header and let CopyArea sort it out.

+ */

+static void

+doShmPutImage(DrawablePtr dst, GCPtr pGC,

+	      int depth, unsigned int format,

+	      int w, int h, int sx, int sy, int sw, int sh, int dx, int dy,

+	      char *data)

+{

+    PixmapPtr pPixmap;

+  

+    pPixmap = GetScratchPixmapHeader(dst->pScreen, w, h, depth,

+				     BitsPerPixel(depth),

+				     PixmapBytePad(w, depth),

+				     data);

+    if (!pPixmap)

+	return;

+    pGC->ops->CopyArea((DrawablePtr)pPixmap, dst, pGC, sx, sy, sw, sh, dx, dy);

+    FreeScratchPixmapHeader(pPixmap);

+}

+

+#ifdef PANORAMIX

+static int 

+ProcPanoramiXShmPutImage(ClientPtr client)

+{

+    int			 j, result, orig_x, orig_y;

+    PanoramiXRes	*draw, *gc;

+    Bool		 sendEvent, isRoot;

+

+    REQUEST(xShmPutImageReq);

+    REQUEST_SIZE_MATCH(xShmPutImageReq);

+

+    result = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,

+				      XRC_DRAWABLE, client, DixWriteAccess);

+    if (result != Success)

+        return (result == BadValue) ? BadDrawable : result;

+

+    result = dixLookupResourceByType((pointer *)&gc, stuff->gc,

+				     XRT_GC, client, DixReadAccess);

+    if (result != Success)

+        return (result == BadValue) ? BadGC : result;

+

+    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;

+

+    orig_x = stuff->dstX;

+    orig_y = stuff->dstY;

+    sendEvent = stuff->sendEvent;

+    stuff->sendEvent = 0;

+    FOR_NSCREENS(j) {

+	if(!j) stuff->sendEvent = sendEvent;

+	stuff->drawable = draw->info[j].id;

+	stuff->gc = gc->info[j].id;

+	if (isRoot) {

+	    stuff->dstX = orig_x - panoramiXdataPtr[j].x;

+	    stuff->dstY = orig_y - panoramiXdataPtr[j].y;

+	}

+	result = ProcShmPutImage(client);

+	if(result != client->noClientException) break;

+    }

+    return(result);

+}

+

+static int 

+ProcPanoramiXShmGetImage(ClientPtr client)

+{

+    PanoramiXRes	*draw;

+    DrawablePtr 	drawables[MAXSCREENS];

+    DrawablePtr 	pDraw;

+    xShmGetImageReply	xgi;

+    ShmDescPtr		shmdesc;

+    int         	i, x, y, w, h, format, rc;

+    Mask		plane = 0, planemask;

+    long		lenPer = 0, length, widthBytesLine;

+    Bool		isRoot;

+

+    REQUEST(xShmGetImageReq);

+

+    REQUEST_SIZE_MATCH(xShmGetImageReq);

+

+    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap)) {

+	client->errorValue = stuff->format;

+        return(BadValue);

+    }

+

+    rc = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,

+				  XRC_DRAWABLE, client, DixWriteAccess);

+    if (rc != Success)

+	return (rc == BadValue) ? BadDrawable : rc;

+

+    if (draw->type == XRT_PIXMAP)

+	return ProcShmGetImage(client);

+

+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,

+			   DixReadAccess);

+    if (rc != Success)

+	return rc;

+

+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

+

+    x = stuff->x;

+    y = stuff->y;

+    w = stuff->width;

+    h = stuff->height;

+    format = stuff->format;

+    planemask = stuff->planeMask;

+

+    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;

+

+    if(isRoot) {

+      if( /* check for being onscreen */

+	x < 0 || x + w > PanoramiXPixWidth ||

+	y < 0 || y + h > PanoramiXPixHeight )

+	    return(BadMatch);

+    } else {

+      if( /* check for being onscreen */

+	panoramiXdataPtr[0].x + pDraw->x + x < 0 ||

+	panoramiXdataPtr[0].x + pDraw->x + x + w > PanoramiXPixWidth ||

+        panoramiXdataPtr[0].y + pDraw->y + y < 0 ||

+	panoramiXdataPtr[0].y + pDraw->y + y + h > PanoramiXPixHeight ||

+	 /* check for being inside of border */

+       	x < - wBorderWidth((WindowPtr)pDraw) ||

+	x + w > wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||

+	y < -wBorderWidth((WindowPtr)pDraw) ||

+	y + h > wBorderWidth ((WindowPtr)pDraw) + (int)pDraw->height)

+	    return(BadMatch);

+    }

+

+    drawables[0] = pDraw;

+    for(i = 1; i < PanoramiXNumScreens; i++) {

+	rc = dixLookupDrawable(drawables+i, draw->info[i].id, client, 0, 

+			       DixReadAccess);

+	if (rc != Success)

+	    return rc;

+    }

+

+    xgi.visual = wVisual(((WindowPtr)pDraw));

+    xgi.type = X_Reply;

+    xgi.length = 0;

+    xgi.sequenceNumber = client->sequence;

+    xgi.depth = pDraw->depth;

+

+    if(format == ZPixmap) {

+	widthBytesLine = PixmapBytePad(w, pDraw->depth);

+	length = widthBytesLine * h;

+    } else {

+	widthBytesLine = PixmapBytePad(w, 1);

+	lenPer = widthBytesLine * h;

+	plane = ((Mask)1) << (pDraw->depth - 1);

+	length = lenPer * Ones(planemask & (plane | (plane - 1)));

+    }

+

+    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);

+    xgi.size = length;

+

+    if (length == 0) {/* nothing to do */ }

+    else if (format == ZPixmap) {

+	    XineramaGetImageData(drawables, x, y, w, h, format, planemask,

+					shmdesc->addr + stuff->offset,

+					widthBytesLine, isRoot);

+    } else {

+

+	length = stuff->offset;

+        for (; plane; plane >>= 1) {

+	    if (planemask & plane) {

+		XineramaGetImageData(drawables, x, y, w, h, 

+				     format, plane, shmdesc->addr + length,

+				     widthBytesLine, isRoot);

+		length += lenPer;

+	    }

+	}

+    }

+    

+    if (client->swapped) {

+	int n;

+    	swaps(&xgi.sequenceNumber, n);

+    	swapl(&xgi.length, n);

+	swapl(&xgi.visual, n);

+	swapl(&xgi.size, n);

+    }

+    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);

+

+    return(client->noClientException);

+}

+

+static int

+ProcPanoramiXShmCreatePixmap(ClientPtr client)

+{

+    ScreenPtr pScreen = NULL;

+    PixmapPtr pMap = NULL;

+    DrawablePtr pDraw;

+    DepthPtr pDepth;

+    int i, j, result, rc;

+    ShmDescPtr shmdesc;

+    REQUEST(xShmCreatePixmapReq);

+    unsigned int width, height, depth;

+    unsigned long size;

+    PanoramiXRes *newPix;

+

+    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);

+    client->errorValue = stuff->pid;

+    if (!sharedPixmaps)

+	return BadImplementation;

+    LEGAL_NEW_RESOURCE(stuff->pid, client);

+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,

+			   DixGetAttrAccess);

+    if (rc != Success)

+	return rc;

+

+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

+

+    width = stuff->width;

+    height = stuff->height;

+    depth = stuff->depth;

+    if (!width || !height || !depth)

+    {

+	client->errorValue = 0;

+        return BadValue;

+    }

+    if (width > 32767 || height > 32767)

+        return BadAlloc;

+

+    if (stuff->depth != 1)

+    {

+        pDepth = pDraw->pScreen->allowedDepths;

+        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)

+	   if (pDepth->depth == stuff->depth)

+               goto CreatePmap;

+	client->errorValue = stuff->depth;

+        return BadValue;

+    }

+

+CreatePmap:

+    size = PixmapBytePad(width, depth) * height;

+    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {

+        if (size < width * height)

+            return BadAlloc;

+    }

+    /* thankfully, offset is unsigned */

+    if (stuff->offset + size < size)

+	return BadAlloc;

+

+    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);

+

+    if(!(newPix = xalloc(sizeof(PanoramiXRes))))

+	return BadAlloc;

+

+    newPix->type = XRT_PIXMAP;

+    newPix->u.pix.shared = TRUE;

+    newPix->info[0].id = stuff->pid;

+    for(j = 1; j < PanoramiXNumScreens; j++)

+	newPix->info[j].id = FakeClientID(client->index);

+

+    result = (client->noClientException);

+

+    FOR_NSCREENS(j) {

+	pScreen = screenInfo.screens[j];

+

+	pMap = (*shmFuncs[j]->CreatePixmap)(pScreen, 

+				stuff->width, stuff->height, stuff->depth,

+				shmdesc->addr + stuff->offset);

+

+	if (pMap) {

+	    dixSetPrivate(&pMap->devPrivates, shmPixmapPrivate, shmdesc);

+            shmdesc->refcnt++;

+	    pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;

+	    pMap->drawable.id = newPix->info[j].id;

+	    if (!AddResource(newPix->info[j].id, RT_PIXMAP, (pointer)pMap)) {

+		(*pScreen->DestroyPixmap)(pMap);

+		result = BadAlloc;

+		break;

+	    }

+	} else {

+	   result = BadAlloc;

+	   break;

+	}

+    }

+

+    if(result == BadAlloc) {

+	while(j--) {

+	    (*pScreen->DestroyPixmap)(pMap);

+	    FreeResource(newPix->info[j].id, RT_NONE);

+	}

+	xfree(newPix);

+    } else 

+	AddResource(stuff->pid, XRT_PIXMAP, newPix);

+

+    return result;

+}

+

+#endif

+

+static int

+ProcShmPutImage(ClientPtr client)

+{

+    GCPtr pGC;

+    DrawablePtr pDraw;

+    long length;

+    ShmDescPtr shmdesc;

+    REQUEST(xShmPutImageReq);

+

+    REQUEST_SIZE_MATCH(xShmPutImageReq);

+    VALIDATE_DRAWABLE_AND_GC(stuff->drawable, pDraw, DixWriteAccess);

+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, FALSE, shmdesc, client);

+    if ((stuff->sendEvent != xTrue) && (stuff->sendEvent != xFalse))

+	return BadValue;

+    if (stuff->format == XYBitmap)

+    {

+        if (stuff->depth != 1)

+            return BadMatch;

+        length = PixmapBytePad(stuff->totalWidth, 1);

+    }

+    else if (stuff->format == XYPixmap)

+    {

+        if (pDraw->depth != stuff->depth)

+            return BadMatch;

+        length = PixmapBytePad(stuff->totalWidth, 1);

+	length *= stuff->depth;

+    }

+    else if (stuff->format == ZPixmap)

+    {

+        if (pDraw->depth != stuff->depth)

+            return BadMatch;

+        length = PixmapBytePad(stuff->totalWidth, stuff->depth);

+    }

+    else

+    {

+	client->errorValue = stuff->format;

+        return BadValue;

+    }

+

+    /* 

+     * There's a potential integer overflow in this check:

+     * VERIFY_SHMSIZE(shmdesc, stuff->offset, length * stuff->totalHeight,

+     *                client);

+     * the version below ought to avoid it

+     */

+    if (stuff->totalHeight != 0 && 

+	length > (shmdesc->size - stuff->offset)/stuff->totalHeight) {

+	client->errorValue = stuff->totalWidth;

+	return BadValue;

+    }

+    if (stuff->srcX > stuff->totalWidth)

+    {

+	client->errorValue = stuff->srcX;

+	return BadValue;

+    }

+    if (stuff->srcY > stuff->totalHeight)

+    {

+	client->errorValue = stuff->srcY;

+	return BadValue;

+    }

+    if ((stuff->srcX + stuff->srcWidth) > stuff->totalWidth)

+    {

+	client->errorValue = stuff->srcWidth;

+	return BadValue;

+    }

+    if ((stuff->srcY + stuff->srcHeight) > stuff->totalHeight)

+    {

+	client->errorValue = stuff->srcHeight;

+	return BadValue;

+    }

+

+    if ((((stuff->format == ZPixmap) && (stuff->srcX == 0)) ||

+	 ((stuff->format != ZPixmap) &&

+	  (stuff->srcX < screenInfo.bitmapScanlinePad) &&

+	  ((stuff->format == XYBitmap) ||

+	   ((stuff->srcY == 0) &&

+	    (stuff->srcHeight == stuff->totalHeight))))) &&

+	((stuff->srcX + stuff->srcWidth) == stuff->totalWidth))

+	(*pGC->ops->PutImage) (pDraw, pGC, stuff->depth,

+			       stuff->dstX, stuff->dstY,

+			       stuff->totalWidth, stuff->srcHeight, 

+			       stuff->srcX, stuff->format, 

+			       shmdesc->addr + stuff->offset +

+			       (stuff->srcY * length));

+    else

+	doShmPutImage(pDraw, pGC, stuff->depth, stuff->format,

+		      stuff->totalWidth, stuff->totalHeight,

+		      stuff->srcX, stuff->srcY,

+		      stuff->srcWidth, stuff->srcHeight,

+		      stuff->dstX, stuff->dstY,

+                      shmdesc->addr + stuff->offset);

+

+    if (stuff->sendEvent)

+    {

+	xShmCompletionEvent ev;

+

+	ev.type = ShmCompletionCode;

+	ev.drawable = stuff->drawable;

+	ev.sequenceNumber = client->sequence;

+	ev.minorEvent = X_ShmPutImage;

+	ev.majorEvent = ShmReqCode;

+	ev.shmseg = stuff->shmseg;

+	ev.offset = stuff->offset;

+	WriteEventsToClient(client, 1, (xEvent *) &ev);

+    }

+

+    return (client->noClientException);

+}

+

+

+

+static int

+ProcShmGetImage(ClientPtr client)

+{

+    DrawablePtr		pDraw;

+    long		lenPer = 0, length;

+    Mask		plane = 0;

+    xShmGetImageReply	xgi;

+    ShmDescPtr		shmdesc;

+    int			n, rc;

+

+    REQUEST(xShmGetImageReq);

+

+    REQUEST_SIZE_MATCH(xShmGetImageReq);

+    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap))

+    {

+	client->errorValue = stuff->format;

+        return(BadValue);

+    }

+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,

+			   DixReadAccess);

+    if (rc != Success)

+	return rc;

+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

+    if (pDraw->type == DRAWABLE_WINDOW)

+    {

+      if( /* check for being viewable */

+	 !((WindowPtr) pDraw)->realized ||

+	  /* check for being on screen */

+         pDraw->x + stuff->x < 0 ||

+ 	 pDraw->x + stuff->x + (int)stuff->width > pDraw->pScreen->width ||

+         pDraw->y + stuff->y < 0 ||

+         pDraw->y + stuff->y + (int)stuff->height > pDraw->pScreen->height ||

+          /* check for being inside of border */

+         stuff->x < - wBorderWidth((WindowPtr)pDraw) ||

+         stuff->x + (int)stuff->width >

+		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||

+         stuff->y < -wBorderWidth((WindowPtr)pDraw) ||

+         stuff->y + (int)stuff->height >

+		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->height

+        )

+	    return(BadMatch);

+	xgi.visual = wVisual(((WindowPtr)pDraw));

+    }

+    else

+    {

+	if (stuff->x < 0 ||

+	    stuff->x+(int)stuff->width > pDraw->width ||

+	    stuff->y < 0 ||

+	    stuff->y+(int)stuff->height > pDraw->height

+	    )

+	    return(BadMatch);

+	xgi.visual = None;

+    }

+    xgi.type = X_Reply;

+    xgi.length = 0;

+    xgi.sequenceNumber = client->sequence;

+    xgi.depth = pDraw->depth;

+    if(stuff->format == ZPixmap)

+    {

+	length = PixmapBytePad(stuff->width, pDraw->depth) * stuff->height;

+    }

+    else 

+    {

+	lenPer = PixmapBytePad(stuff->width, 1) * stuff->height;

+	plane = ((Mask)1) << (pDraw->depth - 1);

+	/* only planes asked for */

+	length = lenPer * Ones(stuff->planeMask & (plane | (plane - 1)));

+    }

+

+    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);

+    xgi.size = length;

+

+    if (length == 0)

+    {

+	/* nothing to do */

+    }

+    else if (stuff->format == ZPixmap)

+    {

+	(*pDraw->pScreen->GetImage)(pDraw, stuff->x, stuff->y,

+				    stuff->width, stuff->height,

+				    stuff->format, stuff->planeMask,

+				    shmdesc->addr + stuff->offset);

+    }

+    else

+    {

+

+	length = stuff->offset;

+        for (; plane; plane >>= 1)

+	{

+	    if (stuff->planeMask & plane)

+	    {

+		(*pDraw->pScreen->GetImage)(pDraw,

+					    stuff->x, stuff->y,

+					    stuff->width, stuff->height,

+					    stuff->format, plane,

+					    shmdesc->addr + length);

+		length += lenPer;

+	    }

+	}

+    }

+    

+    if (client->swapped) {

+    	swaps(&xgi.sequenceNumber, n);

+    	swapl(&xgi.length, n);

+	swapl(&xgi.visual, n);

+	swapl(&xgi.size, n);

+    }

+    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);

+

+    return(client->noClientException);

+}

+

+static PixmapPtr

+fbShmCreatePixmap (ScreenPtr pScreen,

+		   int width, int height, int depth, char *addr)

+{

+    PixmapPtr pPixmap;

+

+    pPixmap = (*pScreen->CreatePixmap)(pScreen, 0, 0, pScreen->rootDepth, 0);

+    if (!pPixmap)

+	return NullPixmap;

+

+    if (!(*pScreen->ModifyPixmapHeader)(pPixmap, width, height, depth,

+	    BitsPerPixel(depth), PixmapBytePad(width, depth), (pointer)addr)) {

+	(*pScreen->DestroyPixmap)(pPixmap);

+	return NullPixmap;

+    }

+    return pPixmap;

+}

+

+static int

+ProcShmCreatePixmap(ClientPtr client)

+{

+    PixmapPtr pMap;

+    DrawablePtr pDraw;

+    DepthPtr pDepth;

+    int i, rc;

+    ShmDescPtr shmdesc;

+    REQUEST(xShmCreatePixmapReq);

+    unsigned int width, height, depth;

+    unsigned long size;

+

+    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);

+    client->errorValue = stuff->pid;

+    if (!sharedPixmaps)

+	return BadImplementation;

+    LEGAL_NEW_RESOURCE(stuff->pid, client);

+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,

+			   DixGetAttrAccess);

+    if (rc != Success)

+	return rc;

+

+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

+    

+    width = stuff->width;

+    height = stuff->height;

+    depth = stuff->depth;

+    if (!width || !height || !depth)

+    {

+	client->errorValue = 0;

+        return BadValue;

+    }

+    if (width > 32767 || height > 32767)

+	return BadAlloc;

+

+    if (stuff->depth != 1)

+    {

+        pDepth = pDraw->pScreen->allowedDepths;

+        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)

+	   if (pDepth->depth == stuff->depth)

+               goto CreatePmap;

+	client->errorValue = stuff->depth;

+        return BadValue;

+    }

+

+CreatePmap:

+    size = PixmapBytePad(width, depth) * height;

+    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {

+	if (size < width * height)

+	    return BadAlloc;

+    }

+    /* thankfully, offset is unsigned */

+    if (stuff->offset + size < size)

+	return BadAlloc;

+

+    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);

+    pMap = (*shmFuncs[pDraw->pScreen->myNum]->CreatePixmap)(

+			    pDraw->pScreen, stuff->width,

+			    stuff->height, stuff->depth,

+			    shmdesc->addr + stuff->offset);

+    if (pMap)

+    {

+	rc = XaceHook(XACE_RESOURCE_ACCESS, client, stuff->pid, RT_PIXMAP,

+		      pMap, RT_NONE, NULL, DixCreateAccess);

+	if (rc != Success) {

+	    pDraw->pScreen->DestroyPixmap(pMap);

+	    return rc;

+	}

+	dixSetPrivate(&pMap->devPrivates, shmPixmapPrivate, shmdesc);

+	shmdesc->refcnt++;

+	pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;

+	pMap->drawable.id = stuff->pid;

+	if (AddResource(stuff->pid, RT_PIXMAP, (pointer)pMap))

+	{

+	    return(client->noClientException);

+	}

+	pDraw->pScreen->DestroyPixmap(pMap);

+    }

+    return (BadAlloc);

+}

+

+static int

+ProcShmDispatch (ClientPtr client)

+{

+    REQUEST(xReq);

+    switch (stuff->data)

+    {

+    case X_ShmQueryVersion:

+	return ProcShmQueryVersion(client);

+    case X_ShmAttach:

+	return ProcShmAttach(client);

+    case X_ShmDetach:

+	return ProcShmDetach(client);

+    case X_ShmPutImage:

+#ifdef PANORAMIX

+        if ( !noPanoramiXExtension )

+	   return ProcPanoramiXShmPutImage(client);

+#endif

+	return ProcShmPutImage(client);

+    case X_ShmGetImage:

+#ifdef PANORAMIX

+        if ( !noPanoramiXExtension )

+	   return ProcPanoramiXShmGetImage(client);

+#endif

+	return ProcShmGetImage(client);

+    case X_ShmCreatePixmap:

+#ifdef PANORAMIX

+        if ( !noPanoramiXExtension )

+	   return ProcPanoramiXShmCreatePixmap(client);

+#endif

+	   return ProcShmCreatePixmap(client);

+    default:

+	return BadRequest;

+    }

+}

+

+static void

+SShmCompletionEvent(xShmCompletionEvent *from, xShmCompletionEvent *to)

+{

+    to->type = from->type;

+    cpswaps(from->sequenceNumber, to->sequenceNumber);

+    cpswapl(from->drawable, to->drawable);

+    cpswaps(from->minorEvent, to->minorEvent);

+    to->majorEvent = from->majorEvent;

+    cpswapl(from->shmseg, to->shmseg);

+    cpswapl(from->offset, to->offset);

+}

+

+static int

+SProcShmQueryVersion(ClientPtr client)

+{

+    int n;

+    REQUEST(xShmQueryVersionReq);

+

+    swaps(&stuff->length, n);

+    return ProcShmQueryVersion(client);

+}

+

+static int

+SProcShmAttach(ClientPtr client)

+{

+    int n;

+    REQUEST(xShmAttachReq);

+    swaps(&stuff->length, n);

+    REQUEST_SIZE_MATCH(xShmAttachReq);

+    swapl(&stuff->shmseg, n);

+    swapl(&stuff->shmid, n);

+    return ProcShmAttach(client);

+}

+

+static int

+SProcShmDetach(ClientPtr client)

+{

+    int n;

+    REQUEST(xShmDetachReq);

+    swaps(&stuff->length, n);

+    REQUEST_SIZE_MATCH(xShmDetachReq);

+    swapl(&stuff->shmseg, n);

+    return ProcShmDetach(client);

+}

+

+static int

+SProcShmPutImage(ClientPtr client)

+{

+    int n;

+    REQUEST(xShmPutImageReq);

+    swaps(&stuff->length, n);

+    REQUEST_SIZE_MATCH(xShmPutImageReq);

+    swapl(&stuff->drawable, n);

+    swapl(&stuff->gc, n);

+    swaps(&stuff->totalWidth, n);

+    swaps(&stuff->totalHeight, n);

+    swaps(&stuff->srcX, n);

+    swaps(&stuff->srcY, n);

+    swaps(&stuff->srcWidth, n);

+    swaps(&stuff->srcHeight, n);

+    swaps(&stuff->dstX, n);

+    swaps(&stuff->dstY, n);

+    swapl(&stuff->shmseg, n);

+    swapl(&stuff->offset, n);

+    return ProcShmPutImage(client);

+}

+

+static int

+SProcShmGetImage(ClientPtr client)

+{

+    int n;

+    REQUEST(xShmGetImageReq);

+    swaps(&stuff->length, n);

+    REQUEST_SIZE_MATCH(xShmGetImageReq);

+    swapl(&stuff->drawable, n);

+    swaps(&stuff->x, n);

+    swaps(&stuff->y, n);

+    swaps(&stuff->width, n);

+    swaps(&stuff->height, n);

+    swapl(&stuff->planeMask, n);

+    swapl(&stuff->shmseg, n);

+    swapl(&stuff->offset, n);

+    return ProcShmGetImage(client);

+}

+

+static int

+SProcShmCreatePixmap(ClientPtr client)

+{

+    int n;

+    REQUEST(xShmCreatePixmapReq);

+    swaps(&stuff->length, n);

+    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);

+    swapl(&stuff->pid, n);

+    swapl(&stuff->drawable, n);

+    swaps(&stuff->width, n);

+    swaps(&stuff->height, n);

+    swapl(&stuff->shmseg, n);

+    swapl(&stuff->offset, n);

+    return ProcShmCreatePixmap(client);

+}

+

+static int

+SProcShmDispatch (ClientPtr client)

+{

+    REQUEST(xReq);

+    switch (stuff->data)

+    {

+    case X_ShmQueryVersion:

+	return SProcShmQueryVersion(client);

+    case X_ShmAttach:

+	return SProcShmAttach(client);

+    case X_ShmDetach:

+	return SProcShmDetach(client);

+    case X_ShmPutImage:

+	return SProcShmPutImage(client);

+    case X_ShmGetImage:

+	return SProcShmGetImage(client);

+    case X_ShmCreatePixmap:

+	return SProcShmCreatePixmap(client);

+    default:

+	return BadRequest;

+    }

+}