xserver xkeyboard-config libX11 pixman mesa git update 24 Mar 2011

1 files changed, 1325 insertions, 1327 deletions

diff --git a/xorg-server/Xext/shm.c b/xorg-server/Xext/shm.c
index 8a048deb0..b08af821b 100644
--- a/xorg-server/Xext/shm.c
+++ b/xorg-server/Xext/shm.c
@@ -1,1327 +1,1325 @@
-/************************************************************

-

-Copyright 1989, 1998  The Open Group

-

-Permission to use, copy, modify, distribute, and sell this software and its

-documentation for any purpose is hereby granted without fee, provided that

-the above copyright notice appear in all copies and that both that

-copyright notice and this permission notice appear in supporting

-documentation.

-

-The above copyright notice and this permission notice shall be included in

-all copies or substantial portions of the Software.

-

-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE

-OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN

-AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN

-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

-

-Except as contained in this notice, the name of The Open Group shall not be

-used in advertising or otherwise to promote the sale, use or other dealings

-in this Software without prior written authorization from The Open Group.

-

-********************************************************/

-

-/* THIS IS NOT AN X CONSORTIUM STANDARD OR AN X PROJECT TEAM SPECIFICATION */

-

-

-#define SHM

-

-#ifdef HAVE_DIX_CONFIG_H

-#include <dix-config.h>

-#endif

-

-#include <sys/types.h>

-#include <sys/ipc.h>

-#include <sys/shm.h>

-#include <unistd.h>

-#include <sys/stat.h>

-#include <X11/X.h>

-#include <X11/Xproto.h>

-#include "misc.h"

-#include "os.h"

-#include "dixstruct.h"

-#include "resource.h"

-#include "scrnintstr.h"

-#include "windowstr.h"

-#include "pixmapstr.h"

-#include "gcstruct.h"

-#include "extnsionst.h"

-#include "servermd.h"

-#include "shmint.h"

-#include "xace.h"

-#include <X11/extensions/shmproto.h>

-#include <X11/Xfuncproto.h>

-#include "protocol-versions.h"

-

-/* Needed for Solaris cross-zone shared memory extension */

-#ifdef HAVE_SHMCTL64

-#include <sys/ipc_impl.h>

-#define SHMSTAT(id, buf)	shmctl64(id, IPC_STAT64, buf)

-#define SHMSTAT_TYPE 		struct shmid_ds64

-#define SHMPERM_TYPE 		struct ipc_perm64

-#define SHM_PERM(buf) 		buf.shmx_perm

-#define SHM_SEGSZ(buf)		buf.shmx_segsz

-#define SHMPERM_UID(p)		p->ipcx_uid

-#define SHMPERM_CUID(p)		p->ipcx_cuid

-#define SHMPERM_GID(p)		p->ipcx_gid

-#define SHMPERM_CGID(p)		p->ipcx_cgid

-#define SHMPERM_MODE(p)		p->ipcx_mode

-#define SHMPERM_ZONEID(p)	p->ipcx_zoneid

-#else

-#define SHMSTAT(id, buf) 	shmctl(id, IPC_STAT, buf)

-#define SHMSTAT_TYPE 		struct shmid_ds

-#define SHMPERM_TYPE 		struct ipc_perm

-#define SHM_PERM(buf) 		buf.shm_perm

-#define SHM_SEGSZ(buf)		buf.shm_segsz

-#define SHMPERM_UID(p)		p->uid

-#define SHMPERM_CUID(p)		p->cuid

-#define SHMPERM_GID(p)		p->gid

-#define SHMPERM_CGID(p)		p->cgid

-#define SHMPERM_MODE(p)		p->mode

-#endif

-

-#ifdef PANORAMIX

-#include "panoramiX.h"

-#include "panoramiXsrv.h"

-#endif

-

-#include "modinit.h"

-

-typedef struct _ShmDesc {

-    struct _ShmDesc *next;

-    int shmid;

-    int refcnt;

-    char *addr;

-    Bool writable;

-    unsigned long size;

-} ShmDescRec, *ShmDescPtr;

-

-typedef struct _ShmScrPrivateRec {

-    CloseScreenProcPtr CloseScreen;

-    ShmFuncsPtr shmFuncs;

-    DestroyPixmapProcPtr destroyPixmap;

-} ShmScrPrivateRec;

-

-static PixmapPtr fbShmCreatePixmap(XSHM_CREATE_PIXMAP_ARGS);

-static int ShmDetachSegment(

-    pointer		/* value */,

-    XID			/* shmseg */

-    );

-static void ShmResetProc(

-    ExtensionEntry *	/* extEntry */

-    );

-static void SShmCompletionEvent(

-    xShmCompletionEvent * /* from */,

-    xShmCompletionEvent * /* to */

-    );

-

-static Bool ShmDestroyPixmap (PixmapPtr pPixmap);

-

-

-static unsigned char ShmReqCode;

-int ShmCompletionCode;

-int BadShmSegCode;

-RESTYPE ShmSegType;

-static ShmDescPtr Shmsegs;

-static Bool sharedPixmaps;

-static DevPrivateKeyRec shmScrPrivateKeyRec;

-#define shmScrPrivateKey (&shmScrPrivateKeyRec)

-static DevPrivateKeyRec shmPixmapPrivateKeyRec;

-#define shmPixmapPrivateKey (&shmPixmapPrivateKeyRec)

-static ShmFuncs miFuncs = {NULL, NULL};

-static ShmFuncs fbFuncs = {fbShmCreatePixmap, NULL};

-

-#define ShmGetScreenPriv(s) ((ShmScrPrivateRec *)dixLookupPrivate(&(s)->devPrivates, shmScrPrivateKey))

-

-#define VERIFY_SHMSEG(shmseg,shmdesc,client) \

-{ \

-    int rc; \

-    rc = dixLookupResourceByType((pointer *)&(shmdesc), shmseg, ShmSegType, \

-                                 client, DixReadAccess); \

-    if (rc != Success) \

-	return rc; \

-}

-

-#define VERIFY_SHMPTR(shmseg,offset,needwrite,shmdesc,client) \

-{ \

-    VERIFY_SHMSEG(shmseg, shmdesc, client); \

-    if ((offset & 3) || (offset > shmdesc->size)) \

-    { \

-	client->errorValue = offset; \

-	return BadValue; \

-    } \

-    if (needwrite && !shmdesc->writable) \

-	return BadAccess; \

-}

-

-#define VERIFY_SHMSIZE(shmdesc,offset,len,client) \

-{ \

-    if ((offset + len) > shmdesc->size) \

-    { \

-	return BadAccess; \

-    } \

-}

-

-

-#if defined(__FreeBSD__) || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__CYGWIN__) || defined(__DragonFly__)

-#include <sys/signal.h>

-

-static Bool badSysCall = FALSE;

-

-static void

-SigSysHandler(int signo)

-{

-    badSysCall = TRUE;

-}

-

-static Bool CheckForShmSyscall(void)

-{

-    void (*oldHandler)();

-    int shmid = -1;

-

-    /* If no SHM support in the kernel, the bad syscall will generate SIGSYS */

-    oldHandler = signal(SIGSYS, SigSysHandler);

-

-    badSysCall = FALSE;

-    shmid = shmget(IPC_PRIVATE, 4096, IPC_CREAT);

-

-    if (shmid != -1)

-    {

-        /* Successful allocation - clean up */

-	shmctl(shmid, IPC_RMID, NULL);

-    }

-    else

-    {

-        /* Allocation failed */

-        badSysCall = TRUE;

-    }

-    signal(SIGSYS, oldHandler);

-    return !badSysCall;

-}

-

-#define MUST_CHECK_FOR_SHM_SYSCALL

-

-#endif

-

-static Bool

-ShmCloseScreen(int i, ScreenPtr pScreen)

-{

-    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(pScreen);

-    pScreen->CloseScreen = screen_priv->CloseScreen;

-    dixSetPrivate(&pScreen->devPrivates, shmScrPrivateKey, NULL);

-    free(screen_priv);

-    return (*pScreen->CloseScreen) (i, pScreen);

-}

-

-static ShmScrPrivateRec *

-ShmInitScreenPriv(ScreenPtr pScreen)

-{

-    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(pScreen);

-    if (!screen_priv)

-    {

-	screen_priv = calloc(1, sizeof (ShmScrPrivateRec));

-	screen_priv->CloseScreen = pScreen->CloseScreen;

-	dixSetPrivate(&pScreen->devPrivates, shmScrPrivateKey, screen_priv);

-	pScreen->CloseScreen = ShmCloseScreen;

-    }

-    return screen_priv;

-}

-

-static Bool

-ShmRegisterPrivates(void)

-{

-    if (!dixRegisterPrivateKey(&shmScrPrivateKeyRec, PRIVATE_SCREEN, 0))

-	return FALSE;

-    if (!dixRegisterPrivateKey(&shmPixmapPrivateKeyRec, PRIVATE_PIXMAP, 0))

-	return FALSE;

-    return TRUE;

-}

-

-/*ARGSUSED*/

-static void

-ShmResetProc(ExtensionEntry *extEntry)

-{

-    int i;

-    for (i = 0; i < screenInfo.numScreens; i++)

-	ShmRegisterFuncs(screenInfo.screens[i], NULL);

-}

-

-void

-ShmRegisterFuncs(ScreenPtr pScreen, ShmFuncsPtr funcs)

-{

-    if (!ShmRegisterPrivates())

-	return;

-    ShmInitScreenPriv(pScreen)->shmFuncs = funcs;

-}

-

-static Bool

-ShmDestroyPixmap (PixmapPtr pPixmap)

-{

-    ScreenPtr	    pScreen = pPixmap->drawable.pScreen;

-    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(pScreen);

-    Bool	    ret;

-    if (pPixmap->refcnt == 1)

-    {

-	ShmDescPtr  shmdesc;

-	shmdesc = (ShmDescPtr)dixLookupPrivate(&pPixmap->devPrivates,

-					       shmPixmapPrivateKey);

-	if (shmdesc)

-	    ShmDetachSegment ((pointer) shmdesc, pPixmap->drawable.id);

-    }

-    

-    pScreen->DestroyPixmap = screen_priv->destroyPixmap;

-    ret = (*pScreen->DestroyPixmap) (pPixmap);

-    screen_priv->destroyPixmap = pScreen->DestroyPixmap;

-    pScreen->DestroyPixmap = ShmDestroyPixmap;

-    return ret;

-}

-

-void

-ShmRegisterFbFuncs(ScreenPtr pScreen)

-{

-    ShmRegisterFuncs(pScreen, &fbFuncs);

-}

-

-static int

-ProcShmQueryVersion(ClientPtr client)

-{

-    xShmQueryVersionReply rep;

-    int n;

-

-    REQUEST_SIZE_MATCH(xShmQueryVersionReq);

-    memset(&rep, 0, sizeof(xShmQueryVersionReply));

-    rep.type = X_Reply;

-    rep.length = 0;

-    rep.sequenceNumber = client->sequence;

-    rep.sharedPixmaps = sharedPixmaps;

-    rep.pixmapFormat = sharedPixmaps ? ZPixmap : 0;

-    rep.majorVersion = SERVER_SHM_MAJOR_VERSION;

-    rep.minorVersion = SERVER_SHM_MINOR_VERSION;

-    rep.uid = geteuid();

-    rep.gid = getegid();

-    if (client->swapped) {

-    	swaps(&rep.sequenceNumber, n);

-    	swapl(&rep.length, n);

-	swaps(&rep.majorVersion, n);

-	swaps(&rep.minorVersion, n);

-	swaps(&rep.uid, n);

-	swaps(&rep.gid, n);

-    }

-    WriteToClient(client, sizeof(xShmQueryVersionReply), (char *)&rep);

-    return Success;

-}

-

-/*

- * Simulate the access() system call for a shared memory segement,

- * using the credentials from the client if available

- */

-static int

-shm_access(ClientPtr client, SHMPERM_TYPE *perm, int readonly)

-{

-    int uid, gid;

-    mode_t mask;

-    int uidset = 0, gidset = 0;

-    LocalClientCredRec *lcc;

-    

-    if (GetLocalClientCreds(client, &lcc) != -1) {

-

-	if (lcc->fieldsSet & LCC_UID_SET) {

-	    uid = lcc->euid;

-	    uidset = 1;

-	}

-	if (lcc->fieldsSet & LCC_GID_SET) {

-	    gid = lcc->egid;

-	    gidset = 1;

-	}

-

-#if defined(HAVE_GETZONEID) && defined(SHMPERM_ZONEID)

-	if ( ((lcc->fieldsSet & LCC_ZID_SET) == 0) || (lcc->zoneid == -1)

-	     || (lcc->zoneid != SHMPERM_ZONEID(perm))) {

-		uidset = 0;

-		gidset = 0;

-	}

-#endif

-	FreeLocalClientCreds(lcc);

-	

-	if (uidset) {

-	    /* User id 0 always gets access */

-	    if (uid == 0) {

-		return 0;

-	    }

-	    /* Check the owner */

-	    if (SHMPERM_UID(perm) == uid || SHMPERM_CUID(perm) == uid) {

-		mask = S_IRUSR;

-		if (!readonly) {

-		    mask |= S_IWUSR;

-		}

-		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;

-	    }

-	}

-

-	if (gidset) {

-	    /* Check the group */

-	    if (SHMPERM_GID(perm) == gid || SHMPERM_CGID(perm) == gid) {

-		mask = S_IRGRP;

-		if (!readonly) {

-		    mask |= S_IWGRP;

-		}

-		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;

-	    }

-	}

-    }

-    /* Otherwise, check everyone else */

-    mask = S_IROTH;

-    if (!readonly) {

-	mask |= S_IWOTH;

-    }

-    return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;

-}

-

-static int

-ProcShmAttach(ClientPtr client)

-{

-    SHMSTAT_TYPE buf;

-    ShmDescPtr shmdesc;

-    REQUEST(xShmAttachReq);

-

-    REQUEST_SIZE_MATCH(xShmAttachReq);

-    LEGAL_NEW_RESOURCE(stuff->shmseg, client);

-    if ((stuff->readOnly != xTrue) && (stuff->readOnly != xFalse))

-    {

-	client->errorValue = stuff->readOnly;

-        return BadValue;

-    }

-    for (shmdesc = Shmsegs;

-	 shmdesc && (shmdesc->shmid != stuff->shmid);

-	 shmdesc = shmdesc->next)

-	;

-    if (shmdesc)

-    {

-	if (!stuff->readOnly && !shmdesc->writable)

-	    return BadAccess;

-	shmdesc->refcnt++;

-    }

-    else

-    {

-	shmdesc = malloc(sizeof(ShmDescRec));

-	if (!shmdesc)

-	    return BadAlloc;

-	shmdesc->addr = shmat(stuff->shmid, 0,

-			      stuff->readOnly ? SHM_RDONLY : 0);

-	if ((shmdesc->addr == ((char *)-1)) ||

-	    SHMSTAT(stuff->shmid, &buf))

-	{

-	    free(shmdesc);

-	    return BadAccess;

-	}

-

-	/* The attach was performed with root privs. We must

-	 * do manual checking of access rights for the credentials 

-	 * of the client */

-

-	if (shm_access(client, &(SHM_PERM(buf)), stuff->readOnly) == -1) {

-	    shmdt(shmdesc->addr);

-	    free(shmdesc);

-	    return BadAccess;

-	}

-

-	shmdesc->shmid = stuff->shmid;

-	shmdesc->refcnt = 1;

-	shmdesc->writable = !stuff->readOnly;

-	shmdesc->size = SHM_SEGSZ(buf);

-	shmdesc->next = Shmsegs;

-	Shmsegs = shmdesc;

-    }

-    if (!AddResource(stuff->shmseg, ShmSegType, (pointer)shmdesc))

-	return BadAlloc;

-    return Success;

-}

-

-/*ARGSUSED*/

-static int

-ShmDetachSegment(pointer value, /* must conform to DeleteType */

-		 XID shmseg)

-{

-    ShmDescPtr shmdesc = (ShmDescPtr)value;

-    ShmDescPtr *prev;

-

-    if (--shmdesc->refcnt)

-	return TRUE;

-    shmdt(shmdesc->addr);

-    for (prev = &Shmsegs; *prev != shmdesc; prev = &(*prev)->next)

-	;

-    *prev = shmdesc->next;

-    free(shmdesc);

-    return Success;

-}

-

-static int

-ProcShmDetach(ClientPtr client)

-{

-    ShmDescPtr shmdesc;

-    REQUEST(xShmDetachReq);

-

-    REQUEST_SIZE_MATCH(xShmDetachReq);

-    VERIFY_SHMSEG(stuff->shmseg, shmdesc, client);

-    FreeResource(stuff->shmseg, RT_NONE);

-    return Success;

-}

-

-/*

- * If the given request doesn't exactly match PutImage's constraints,

- * wrap the image in a scratch pixmap header and let CopyArea sort it out.

- */

-static void

-doShmPutImage(DrawablePtr dst, GCPtr pGC,

-	      int depth, unsigned int format,

-	      int w, int h, int sx, int sy, int sw, int sh, int dx, int dy,

-	      char *data)

-{

-    PixmapPtr pPixmap;

-

-    if (format == ZPixmap || depth == 1) {

-	pPixmap = GetScratchPixmapHeader(dst->pScreen, w, h, depth,

-					 BitsPerPixel(depth),

-					 PixmapBytePad(w, depth),

-					 data);

-	if (!pPixmap)

-	    return;

-	pGC->ops->CopyArea((DrawablePtr)pPixmap, dst, pGC, sx, sy, sw, sh, dx, dy);

-	FreeScratchPixmapHeader(pPixmap);

-    } else {

-	GCPtr putGC = GetScratchGC(depth, dst->pScreen);

-

-	if (!putGC)

-	    return;

-

-	pPixmap = (*dst->pScreen->CreatePixmap)(dst->pScreen, sw, sh, depth,

-						CREATE_PIXMAP_USAGE_SCRATCH);

-	if (!pPixmap) {

-	    FreeScratchGC(putGC);

-	    return;

-	}

-	ValidateGC(&pPixmap->drawable, putGC);

-	(*putGC->ops->PutImage)(&pPixmap->drawable, putGC, depth, -sx, -sy, w, h, 0,

-				(format == XYPixmap) ? XYPixmap : ZPixmap, data);

-	FreeScratchGC(putGC);

-	if (format == XYBitmap)

-	    (void)(*pGC->ops->CopyPlane)(&pPixmap->drawable, dst, pGC, 0, 0, sw, sh,

-					 dx, dy, 1L);

-	else

-	    (void)(*pGC->ops->CopyArea)(&pPixmap->drawable, dst, pGC, 0, 0, sw, sh,

-					dx, dy);

-	(*pPixmap->drawable.pScreen->DestroyPixmap)(pPixmap);

-    }

-}

-

-static int

-ProcShmPutImage(ClientPtr client)

-{

-    GCPtr pGC;

-    DrawablePtr pDraw;

-    long length;

-    ShmDescPtr shmdesc;

-    REQUEST(xShmPutImageReq);

-

-    REQUEST_SIZE_MATCH(xShmPutImageReq);

-    VALIDATE_DRAWABLE_AND_GC(stuff->drawable, pDraw, DixWriteAccess);

-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, FALSE, shmdesc, client);

-    if ((stuff->sendEvent != xTrue) && (stuff->sendEvent != xFalse))

-	return BadValue;

-    if (stuff->format == XYBitmap)

-    {

-        if (stuff->depth != 1)

-            return BadMatch;

-        length = PixmapBytePad(stuff->totalWidth, 1);

-    }

-    else if (stuff->format == XYPixmap)

-    {

-        if (pDraw->depth != stuff->depth)

-            return BadMatch;

-        length = PixmapBytePad(stuff->totalWidth, 1);

-	length *= stuff->depth;

-    }

-    else if (stuff->format == ZPixmap)

-    {

-        if (pDraw->depth != stuff->depth)

-            return BadMatch;

-        length = PixmapBytePad(stuff->totalWidth, stuff->depth);

-    }

-    else

-    {

-	client->errorValue = stuff->format;

-        return BadValue;

-    }

-

-    /*

-     * There's a potential integer overflow in this check:

-     * VERIFY_SHMSIZE(shmdesc, stuff->offset, length * stuff->totalHeight,

-     *                client);

-     * the version below ought to avoid it

-     */

-    if (stuff->totalHeight != 0 &&

-	length > (shmdesc->size - stuff->offset)/stuff->totalHeight) {

-	client->errorValue = stuff->totalWidth;

-	return BadValue;

-    }

-    if (stuff->srcX > stuff->totalWidth)

-    {

-	client->errorValue = stuff->srcX;

-	return BadValue;

-    }

-    if (stuff->srcY > stuff->totalHeight)

-    {

-	client->errorValue = stuff->srcY;

-	return BadValue;

-    }

-    if ((stuff->srcX + stuff->srcWidth) > stuff->totalWidth)

-    {

-	client->errorValue = stuff->srcWidth;

-	return BadValue;

-    }

-    if ((stuff->srcY + stuff->srcHeight) > stuff->totalHeight)

-    {

-	client->errorValue = stuff->srcHeight;

-	return BadValue;

-    }

-

-    if ((((stuff->format == ZPixmap) && (stuff->srcX == 0)) ||

-	 ((stuff->format != ZPixmap) &&

-	  (stuff->srcX < screenInfo.bitmapScanlinePad) &&

-	  ((stuff->format == XYBitmap) ||

-	   ((stuff->srcY == 0) &&

-	    (stuff->srcHeight == stuff->totalHeight))))) &&

-	((stuff->srcX + stuff->srcWidth) == stuff->totalWidth))

-	(*pGC->ops->PutImage) (pDraw, pGC, stuff->depth,

-			       stuff->dstX, stuff->dstY,

-			       stuff->totalWidth, stuff->srcHeight,

-			       stuff->srcX, stuff->format,

-			       shmdesc->addr + stuff->offset +

-			       (stuff->srcY * length));

-    else

-	doShmPutImage(pDraw, pGC, stuff->depth, stuff->format,

-		      stuff->totalWidth, stuff->totalHeight,

-		      stuff->srcX, stuff->srcY,

-		      stuff->srcWidth, stuff->srcHeight,

-		      stuff->dstX, stuff->dstY,

-                      shmdesc->addr + stuff->offset);

-

-    if (stuff->sendEvent)

-    {

-	xShmCompletionEvent ev;

-

-	ev.type = ShmCompletionCode;

-	ev.drawable = stuff->drawable;

-	ev.minorEvent = X_ShmPutImage;

-	ev.majorEvent = ShmReqCode;

-	ev.shmseg = stuff->shmseg;

-	ev.offset = stuff->offset;

-	WriteEventsToClient(client, 1, (xEvent *) &ev);

-    }

-

-    return Success;

-}

-

-static int

-ProcShmGetImage(ClientPtr client)

-{

-    DrawablePtr		pDraw;

-    long		lenPer = 0, length;

-    Mask		plane = 0;

-    xShmGetImageReply	xgi;

-    ShmDescPtr		shmdesc;

-    int			n, rc;

-

-    REQUEST(xShmGetImageReq);

-

-    REQUEST_SIZE_MATCH(xShmGetImageReq);

-    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap))

-    {

-	client->errorValue = stuff->format;

-        return BadValue;

-    }

-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,

-			   DixReadAccess);

-    if (rc != Success)

-	return rc;

-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

-    if (pDraw->type == DRAWABLE_WINDOW)

-    {

-      if( /* check for being viewable */

-	 !((WindowPtr) pDraw)->realized ||

-	  /* check for being on screen */

-         pDraw->x + stuff->x < 0 ||

-         pDraw->x + stuff->x + (int)stuff->width > pDraw->pScreen->width ||

-         pDraw->y + stuff->y < 0 ||

-         pDraw->y + stuff->y + (int)stuff->height > pDraw->pScreen->height ||

-          /* check for being inside of border */

-         stuff->x < - wBorderWidth((WindowPtr)pDraw) ||

-         stuff->x + (int)stuff->width >

-		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||

-         stuff->y < -wBorderWidth((WindowPtr)pDraw) ||

-         stuff->y + (int)stuff->height >

-		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->height

-        )

-	    return BadMatch;

-	xgi.visual = wVisual(((WindowPtr)pDraw));

-    }

-    else

-    {

-	if (stuff->x < 0 ||

-	    stuff->x+(int)stuff->width > pDraw->width ||

-	    stuff->y < 0 ||

-	    stuff->y+(int)stuff->height > pDraw->height

-	    )

-	    return BadMatch;

-	xgi.visual = None;

-    }

-    xgi.type = X_Reply;

-    xgi.length = 0;

-    xgi.sequenceNumber = client->sequence;

-    xgi.depth = pDraw->depth;

-    if(stuff->format == ZPixmap)

-    {

-	length = PixmapBytePad(stuff->width, pDraw->depth) * stuff->height;

-    }

-    else

-    {

-	lenPer = PixmapBytePad(stuff->width, 1) * stuff->height;

-	plane = ((Mask)1) << (pDraw->depth - 1);

-	/* only planes asked for */

-	length = lenPer * Ones(stuff->planeMask & (plane | (plane - 1)));

-    }

-

-    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);

-    xgi.size = length;

-

-    if (length == 0)

-    {

-	/* nothing to do */

-    }

-    else if (stuff->format == ZPixmap)

-    {

-	(*pDraw->pScreen->GetImage)(pDraw, stuff->x, stuff->y,

-				    stuff->width, stuff->height,

-				    stuff->format, stuff->planeMask,

-				    shmdesc->addr + stuff->offset);

-    }

-    else

-    {

-

-	length = stuff->offset;

-        for (; plane; plane >>= 1)

-	{

-	    if (stuff->planeMask & plane)

-	    {

-		(*pDraw->pScreen->GetImage)(pDraw,

-					    stuff->x, stuff->y,

-					    stuff->width, stuff->height,

-					    stuff->format, plane,

-					    shmdesc->addr + length);

-		length += lenPer;

-	    }

-	}

-    }

-

-    if (client->swapped) {

-	swaps(&xgi.sequenceNumber, n);

-	swapl(&xgi.length, n);

-	swapl(&xgi.visual, n);

-	swapl(&xgi.size, n);

-    }

-    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);

-

-    return Success;

-}

-

-#ifdef PANORAMIX

-static int 

-ProcPanoramiXShmPutImage(ClientPtr client)

-{

-    int			 j, result, orig_x, orig_y;

-    PanoramiXRes	*draw, *gc;

-    Bool		 sendEvent, isRoot;

-

-    REQUEST(xShmPutImageReq);

-    REQUEST_SIZE_MATCH(xShmPutImageReq);

-

-    result = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,

-				      XRC_DRAWABLE, client, DixWriteAccess);

-    if (result != Success)

-        return (result == BadValue) ? BadDrawable : result;

-

-    result = dixLookupResourceByType((pointer *)&gc, stuff->gc,

-				     XRT_GC, client, DixReadAccess);

-    if (result != Success)

-        return result;

-

-    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;

-

-    orig_x = stuff->dstX;

-    orig_y = stuff->dstY;

-    sendEvent = stuff->sendEvent;

-    stuff->sendEvent = 0;

-    FOR_NSCREENS(j) {

-	if(!j) stuff->sendEvent = sendEvent;

-	stuff->drawable = draw->info[j].id;

-	stuff->gc = gc->info[j].id;

-	if (isRoot) {

-	    stuff->dstX = orig_x - screenInfo.screens[j]->x;

-	    stuff->dstY = orig_y - screenInfo.screens[j]->y;

-	}

-	result = ProcShmPutImage(client);

-	if(result != Success) break;

-    }

-    return result;

-}

-

-static int 

-ProcPanoramiXShmGetImage(ClientPtr client)

-{

-    PanoramiXRes	*draw;

-    DrawablePtr 	*drawables;

-    DrawablePtr 	pDraw;

-    xShmGetImageReply	xgi;

-    ShmDescPtr		shmdesc;

-    int         	i, x, y, w, h, format, rc;

-    Mask		plane = 0, planemask;

-    long		lenPer = 0, length, widthBytesLine;

-    Bool		isRoot;

-

-    REQUEST(xShmGetImageReq);

-

-    REQUEST_SIZE_MATCH(xShmGetImageReq);

-

-    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap)) {

-	client->errorValue = stuff->format;

-        return BadValue;

-    }

-

-    rc = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,

-				  XRC_DRAWABLE, client, DixWriteAccess);

-    if (rc != Success)

-	return (rc == BadValue) ? BadDrawable : rc;

-

-    if (draw->type == XRT_PIXMAP)

-	return ProcShmGetImage(client);

-

-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,

-			   DixReadAccess);

-    if (rc != Success)

-	return rc;

-

-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

-

-    x = stuff->x;

-    y = stuff->y;

-    w = stuff->width;

-    h = stuff->height;

-    format = stuff->format;

-    planemask = stuff->planeMask;

-

-    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;

-

-    if(isRoot) {

-      if( /* check for being onscreen */

-	x < 0 || x + w > PanoramiXPixWidth ||

-	y < 0 || y + h > PanoramiXPixHeight )

-	    return BadMatch;

-    } else {

-      if( /* check for being onscreen */

-	screenInfo.screens[0]->x + pDraw->x + x < 0 ||

-	screenInfo.screens[0]->x + pDraw->x + x + w > PanoramiXPixWidth ||

-	screenInfo.screens[0]->y + pDraw->y + y < 0 ||

-	screenInfo.screens[0]->y + pDraw->y + y + h > PanoramiXPixHeight ||

-	 /* check for being inside of border */

-       	x < - wBorderWidth((WindowPtr)pDraw) ||

-	x + w > wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||

-	y < -wBorderWidth((WindowPtr)pDraw) ||

-	y + h > wBorderWidth ((WindowPtr)pDraw) + (int)pDraw->height)

-	    return BadMatch;

-    }

-

-    drawables = calloc(PanoramiXNumScreens, sizeof(DrawablePtr));

-    if(!drawables)

-	return BadAlloc;

-

-    drawables[0] = pDraw;

-    for(i = 1; i < PanoramiXNumScreens; i++) {

-	rc = dixLookupDrawable(drawables+i, draw->info[i].id, client, 0, 

-			       DixReadAccess);

-	if (rc != Success)

-	{

-	    free(drawables);

-	    return rc;

-	}

-    }

-

-    xgi.visual = wVisual(((WindowPtr)pDraw));

-    xgi.type = X_Reply;

-    xgi.length = 0;

-    xgi.sequenceNumber = client->sequence;

-    xgi.depth = pDraw->depth;

-

-    if(format == ZPixmap) {

-	widthBytesLine = PixmapBytePad(w, pDraw->depth);

-	length = widthBytesLine * h;

-    } else {

-	widthBytesLine = PixmapBytePad(w, 1);

-	lenPer = widthBytesLine * h;

-	plane = ((Mask)1) << (pDraw->depth - 1);

-	length = lenPer * Ones(planemask & (plane | (plane - 1)));

-    }

-

-    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);

-    xgi.size = length;

-

-    if (length == 0) {/* nothing to do */ }

-    else if (format == ZPixmap) {

-	    XineramaGetImageData(drawables, x, y, w, h, format, planemask,

-					shmdesc->addr + stuff->offset,

-					widthBytesLine, isRoot);

-    } else {

-

-	length = stuff->offset;

-        for (; plane; plane >>= 1) {

-	    if (planemask & plane) {

-		XineramaGetImageData(drawables, x, y, w, h, 

-				     format, plane, shmdesc->addr + length,

-				     widthBytesLine, isRoot);

-		length += lenPer;

-	    }

-	}

-    }

-    free(drawables);

-    

-    if (client->swapped) {

-	int n;

-    	swaps(&xgi.sequenceNumber, n);

-    	swapl(&xgi.length, n);

-	swapl(&xgi.visual, n);

-	swapl(&xgi.size, n);

-    }

-    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);

-

-    return Success;

-}

-

-static int

-ProcPanoramiXShmCreatePixmap(ClientPtr client)

-{

-    ScreenPtr pScreen = NULL;

-    PixmapPtr pMap = NULL;

-    DrawablePtr pDraw;

-    DepthPtr pDepth;

-    int i, j, result, rc;

-    ShmDescPtr shmdesc;

-    REQUEST(xShmCreatePixmapReq);

-    unsigned int width, height, depth;

-    unsigned long size;

-    PanoramiXRes *newPix;

-

-    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);

-    client->errorValue = stuff->pid;

-    if (!sharedPixmaps)

-	return BadImplementation;

-    LEGAL_NEW_RESOURCE(stuff->pid, client);

-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,

-			   DixGetAttrAccess);

-    if (rc != Success)

-	return rc;

-

-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

-

-    width = stuff->width;

-    height = stuff->height;

-    depth = stuff->depth;

-    if (!width || !height || !depth)

-    {

-	client->errorValue = 0;

-        return BadValue;

-    }

-    if (width > 32767 || height > 32767)

-        return BadAlloc;

-

-    if (stuff->depth != 1)

-    {

-        pDepth = pDraw->pScreen->allowedDepths;

-        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)

-	   if (pDepth->depth == stuff->depth)

-               goto CreatePmap;

-	client->errorValue = stuff->depth;

-        return BadValue;

-    }

-

-CreatePmap:

-    size = PixmapBytePad(width, depth) * height;

-    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {

-        if (size < width * height)

-            return BadAlloc;

-    }

-    /* thankfully, offset is unsigned */

-    if (stuff->offset + size < size)

-	return BadAlloc;

-

-    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);

-

-    if(!(newPix = malloc(sizeof(PanoramiXRes))))

-	return BadAlloc;

-

-    newPix->type = XRT_PIXMAP;

-    newPix->u.pix.shared = TRUE;

-    newPix->info[0].id = stuff->pid;

-    for(j = 1; j < PanoramiXNumScreens; j++)

-	newPix->info[j].id = FakeClientID(client->index);

-

-    result = Success;

-

-    FOR_NSCREENS(j) {

-	ShmScrPrivateRec *screen_priv;

-	pScreen = screenInfo.screens[j];

-

-	screen_priv = ShmGetScreenPriv(pScreen);

-	pMap = (*screen_priv->shmFuncs->CreatePixmap)(pScreen,

-				stuff->width, stuff->height, stuff->depth,

-				shmdesc->addr + stuff->offset);

-

-	if (pMap) {

-	    dixSetPrivate(&pMap->devPrivates, shmPixmapPrivateKey, shmdesc);

-            shmdesc->refcnt++;

-	    pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;

-	    pMap->drawable.id = newPix->info[j].id;

-	    if (!AddResource(newPix->info[j].id, RT_PIXMAP, (pointer)pMap)) {

-		(*pScreen->DestroyPixmap)(pMap);

-		result = BadAlloc;

-		break;

-	    }

-	} else {

-	   result = BadAlloc;

-	   break;

-	}

-    }

-

-    if(result == BadAlloc) {

-	while(j--) {

-	    (*pScreen->DestroyPixmap)(pMap);

-	    FreeResource(newPix->info[j].id, RT_NONE);

-	}

-	free(newPix);

-    } else 

-	AddResource(stuff->pid, XRT_PIXMAP, newPix);

-

-    return result;

-}

-#endif

-

-static PixmapPtr

-fbShmCreatePixmap (ScreenPtr pScreen,

-		   int width, int height, int depth, char *addr)

-{

-    PixmapPtr pPixmap;

-

-    pPixmap = (*pScreen->CreatePixmap)(pScreen, 0, 0, pScreen->rootDepth, 0);

-    if (!pPixmap)

-	return NullPixmap;

-

-    if (!(*pScreen->ModifyPixmapHeader)(pPixmap, width, height, depth,

-	    BitsPerPixel(depth), PixmapBytePad(width, depth), (pointer)addr)) {

-	(*pScreen->DestroyPixmap)(pPixmap);

-	return NullPixmap;

-    }

-    return pPixmap;

-}

-

-static int

-ProcShmCreatePixmap(ClientPtr client)

-{

-    PixmapPtr pMap;

-    DrawablePtr pDraw;

-    DepthPtr pDepth;

-    int i, rc;

-    ShmDescPtr shmdesc;

-    ShmScrPrivateRec *screen_priv;

-    REQUEST(xShmCreatePixmapReq);

-    unsigned int width, height, depth;

-    unsigned long size;

-

-    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);

-    client->errorValue = stuff->pid;

-    if (!sharedPixmaps)

-	return BadImplementation;

-    LEGAL_NEW_RESOURCE(stuff->pid, client);

-    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,

-			   DixGetAttrAccess);

-    if (rc != Success)

-	return rc;

-

-    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);

-    

-    width = stuff->width;

-    height = stuff->height;

-    depth = stuff->depth;

-    if (!width || !height || !depth)

-    {

-	client->errorValue = 0;

-        return BadValue;

-    }

-    if (width > 32767 || height > 32767)

-	return BadAlloc;

-

-    if (stuff->depth != 1)

-    {

-        pDepth = pDraw->pScreen->allowedDepths;

-        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)

-	   if (pDepth->depth == stuff->depth)

-               goto CreatePmap;

-	client->errorValue = stuff->depth;

-        return BadValue;

-    }

-

-CreatePmap:

-    size = PixmapBytePad(width, depth) * height;

-    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {

-	if (size < width * height)

-	    return BadAlloc;

-    }

-    /* thankfully, offset is unsigned */

-    if (stuff->offset + size < size)

-	return BadAlloc;

-

-    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);

-    screen_priv = ShmGetScreenPriv(pDraw->pScreen);

-    pMap = (*screen_priv->shmFuncs->CreatePixmap)(

-			    pDraw->pScreen, stuff->width,

-			    stuff->height, stuff->depth,

-			    shmdesc->addr + stuff->offset);

-    if (pMap)

-    {

-	rc = XaceHook(XACE_RESOURCE_ACCESS, client, stuff->pid, RT_PIXMAP,

-		      pMap, RT_NONE, NULL, DixCreateAccess);

-	if (rc != Success) {

-	    pDraw->pScreen->DestroyPixmap(pMap);

-	    return rc;

-	}

-	dixSetPrivate(&pMap->devPrivates, shmPixmapPrivateKey, shmdesc);

-	shmdesc->refcnt++;

-	pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;

-	pMap->drawable.id = stuff->pid;

-	if (AddResource(stuff->pid, RT_PIXMAP, (pointer)pMap))

-	{

-	    return Success;

-	}

-	pDraw->pScreen->DestroyPixmap(pMap);

-    }

-    return BadAlloc;

-}

-

-static int

-ProcShmDispatch (ClientPtr client)

-{

-    REQUEST(xReq);

-    switch (stuff->data)

-    {

-    case X_ShmQueryVersion:

-	return ProcShmQueryVersion(client);

-    case X_ShmAttach:

-	return ProcShmAttach(client);

-    case X_ShmDetach:

-	return ProcShmDetach(client);

-    case X_ShmPutImage:

-#ifdef PANORAMIX

-        if ( !noPanoramiXExtension )

-	   return ProcPanoramiXShmPutImage(client);

-#endif

-	return ProcShmPutImage(client);

-    case X_ShmGetImage:

-#ifdef PANORAMIX

-        if ( !noPanoramiXExtension )

-	   return ProcPanoramiXShmGetImage(client);

-#endif

-	return ProcShmGetImage(client);

-    case X_ShmCreatePixmap:

-#ifdef PANORAMIX

-        if ( !noPanoramiXExtension )

-	   return ProcPanoramiXShmCreatePixmap(client);

-#endif

-	   return ProcShmCreatePixmap(client);

-    default:

-	return BadRequest;

-    }

-}

-

-static void

-SShmCompletionEvent(xShmCompletionEvent *from, xShmCompletionEvent *to)

-{

-    to->type = from->type;

-    cpswaps(from->sequenceNumber, to->sequenceNumber);

-    cpswapl(from->drawable, to->drawable);

-    cpswaps(from->minorEvent, to->minorEvent);

-    to->majorEvent = from->majorEvent;

-    cpswapl(from->shmseg, to->shmseg);

-    cpswapl(from->offset, to->offset);

-}

-

-static int

-SProcShmQueryVersion(ClientPtr client)

-{

-    int n;

-    REQUEST(xShmQueryVersionReq);

-

-    swaps(&stuff->length, n);

-    return ProcShmQueryVersion(client);

-}

-

-static int

-SProcShmAttach(ClientPtr client)

-{

-    int n;

-    REQUEST(xShmAttachReq);

-    swaps(&stuff->length, n);

-    REQUEST_SIZE_MATCH(xShmAttachReq);

-    swapl(&stuff->shmseg, n);

-    swapl(&stuff->shmid, n);

-    return ProcShmAttach(client);

-}

-

-static int

-SProcShmDetach(ClientPtr client)

-{

-    int n;

-    REQUEST(xShmDetachReq);

-    swaps(&stuff->length, n);

-    REQUEST_SIZE_MATCH(xShmDetachReq);

-    swapl(&stuff->shmseg, n);

-    return ProcShmDetach(client);

-}

-

-static int

-SProcShmPutImage(ClientPtr client)

-{

-    int n;

-    REQUEST(xShmPutImageReq);

-    swaps(&stuff->length, n);

-    REQUEST_SIZE_MATCH(xShmPutImageReq);

-    swapl(&stuff->drawable, n);

-    swapl(&stuff->gc, n);

-    swaps(&stuff->totalWidth, n);

-    swaps(&stuff->totalHeight, n);

-    swaps(&stuff->srcX, n);

-    swaps(&stuff->srcY, n);

-    swaps(&stuff->srcWidth, n);

-    swaps(&stuff->srcHeight, n);

-    swaps(&stuff->dstX, n);

-    swaps(&stuff->dstY, n);

-    swapl(&stuff->shmseg, n);

-    swapl(&stuff->offset, n);

-    return ProcShmPutImage(client);

-}

-

-static int

-SProcShmGetImage(ClientPtr client)

-{

-    int n;

-    REQUEST(xShmGetImageReq);

-    swaps(&stuff->length, n);

-    REQUEST_SIZE_MATCH(xShmGetImageReq);

-    swapl(&stuff->drawable, n);

-    swaps(&stuff->x, n);

-    swaps(&stuff->y, n);

-    swaps(&stuff->width, n);

-    swaps(&stuff->height, n);

-    swapl(&stuff->planeMask, n);

-    swapl(&stuff->shmseg, n);

-    swapl(&stuff->offset, n);

-    return ProcShmGetImage(client);

-}

-

-static int

-SProcShmCreatePixmap(ClientPtr client)

-{

-    int n;

-    REQUEST(xShmCreatePixmapReq);

-    swaps(&stuff->length, n);

-    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);

-    swapl(&stuff->pid, n);

-    swapl(&stuff->drawable, n);

-    swaps(&stuff->width, n);

-    swaps(&stuff->height, n);

-    swapl(&stuff->shmseg, n);

-    swapl(&stuff->offset, n);

-    return ProcShmCreatePixmap(client);

-}

-

-static int

-SProcShmDispatch (ClientPtr client)

-{

-    REQUEST(xReq);

-    switch (stuff->data)

-    {

-    case X_ShmQueryVersion:

-	return SProcShmQueryVersion(client);

-    case X_ShmAttach:

-	return SProcShmAttach(client);

-    case X_ShmDetach:

-	return SProcShmDetach(client);

-    case X_ShmPutImage:

-	return SProcShmPutImage(client);

-    case X_ShmGetImage:

-	return SProcShmGetImage(client);

-    case X_ShmCreatePixmap:

-	return SProcShmCreatePixmap(client);

-    default:

-	return BadRequest;

-    }

-}

-

-void

-ShmExtensionInit(INITARGS)

-{

-    ExtensionEntry *extEntry;

-    int i;

-

-#ifdef MUST_CHECK_FOR_SHM_SYSCALL

-    if (!CheckForShmSyscall())

-    {

-	ErrorF("MIT-SHM extension disabled due to lack of kernel support\n");

-	return;

-    }

-#endif

-

-    if (!ShmRegisterPrivates())

-	return;

-

-    sharedPixmaps = xFalse;

-    {

-      sharedPixmaps = xTrue;

-      for (i = 0; i < screenInfo.numScreens; i++)

-      {

-	ShmScrPrivateRec *screen_priv = ShmInitScreenPriv(screenInfo.screens[i]);

-	if (!screen_priv->shmFuncs)

-	    screen_priv->shmFuncs = &miFuncs;

-	if (!screen_priv->shmFuncs->CreatePixmap)

-	    sharedPixmaps = xFalse;

-      }

-      if (sharedPixmaps)

-	for (i = 0; i < screenInfo.numScreens; i++)

-	{

-	    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(screenInfo.screens[i]);

-	    screen_priv->destroyPixmap = screenInfo.screens[i]->DestroyPixmap;

-	    screenInfo.screens[i]->DestroyPixmap = ShmDestroyPixmap;

-	}

-    }

-    ShmSegType = CreateNewResourceType(ShmDetachSegment, "ShmSeg");

-    if (ShmSegType &&

-	(extEntry = AddExtension(SHMNAME, ShmNumberEvents, ShmNumberErrors,

-				 ProcShmDispatch, SProcShmDispatch,

-				 ShmResetProc, StandardMinorOpcode)))

-    {

-	ShmReqCode = (unsigned char)extEntry->base;

-	ShmCompletionCode = extEntry->eventBase;

-	BadShmSegCode = extEntry->errorBase;

-	SetResourceTypeErrorValue(ShmSegType, BadShmSegCode);

-	EventSwapVector[ShmCompletionCode] = (EventSwapPtr) SShmCompletionEvent;

-    }

-}

+/************************************************************
+
+Copyright 1989, 1998  The Open Group
+
+Permission to use, copy, modify, distribute, and sell this software and its
+documentation for any purpose is hereby granted without fee, provided that
+the above copyright notice appear in all copies and that both that
+copyright notice and this permission notice appear in supporting
+documentation.
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
+AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+Except as contained in this notice, the name of The Open Group shall not be
+used in advertising or otherwise to promote the sale, use or other dealings
+in this Software without prior written authorization from The Open Group.
+
+********************************************************/
+
+/* THIS IS NOT AN X CONSORTIUM STANDARD OR AN X PROJECT TEAM SPECIFICATION */
+
+
+#define SHM
+
+#ifdef HAVE_DIX_CONFIG_H
+#include <dix-config.h>
+#endif
+
+#include <sys/types.h>
+#include <sys/ipc.h>
+#include <sys/shm.h>
+#include <unistd.h>
+#include <sys/stat.h>
+#include <X11/X.h>
+#include <X11/Xproto.h>
+#include "misc.h"
+#include "os.h"
+#include "dixstruct.h"
+#include "resource.h"
+#include "scrnintstr.h"
+#include "windowstr.h"
+#include "pixmapstr.h"
+#include "gcstruct.h"
+#include "extnsionst.h"
+#include "servermd.h"
+#include "shmint.h"
+#include "xace.h"
+#include <X11/extensions/shmproto.h>
+#include <X11/Xfuncproto.h>
+#include "protocol-versions.h"
+
+/* Needed for Solaris cross-zone shared memory extension */
+#ifdef HAVE_SHMCTL64
+#include <sys/ipc_impl.h>
+#define SHMSTAT(id, buf)	shmctl64(id, IPC_STAT64, buf)
+#define SHMSTAT_TYPE 		struct shmid_ds64
+#define SHMPERM_TYPE 		struct ipc_perm64
+#define SHM_PERM(buf) 		buf.shmx_perm
+#define SHM_SEGSZ(buf)		buf.shmx_segsz
+#define SHMPERM_UID(p)		p->ipcx_uid
+#define SHMPERM_CUID(p)		p->ipcx_cuid
+#define SHMPERM_GID(p)		p->ipcx_gid
+#define SHMPERM_CGID(p)		p->ipcx_cgid
+#define SHMPERM_MODE(p)		p->ipcx_mode
+#define SHMPERM_ZONEID(p)	p->ipcx_zoneid
+#else
+#define SHMSTAT(id, buf) 	shmctl(id, IPC_STAT, buf)
+#define SHMSTAT_TYPE 		struct shmid_ds
+#define SHMPERM_TYPE 		struct ipc_perm
+#define SHM_PERM(buf) 		buf.shm_perm
+#define SHM_SEGSZ(buf)		buf.shm_segsz
+#define SHMPERM_UID(p)		p->uid
+#define SHMPERM_CUID(p)		p->cuid
+#define SHMPERM_GID(p)		p->gid
+#define SHMPERM_CGID(p)		p->cgid
+#define SHMPERM_MODE(p)		p->mode
+#endif
+
+#ifdef PANORAMIX
+#include "panoramiX.h"
+#include "panoramiXsrv.h"
+#endif
+
+#include "modinit.h"
+
+typedef struct _ShmDesc {
+    struct _ShmDesc *next;
+    int shmid;
+    int refcnt;
+    char *addr;
+    Bool writable;
+    unsigned long size;
+} ShmDescRec, *ShmDescPtr;
+
+typedef struct _ShmScrPrivateRec {
+    CloseScreenProcPtr CloseScreen;
+    ShmFuncsPtr shmFuncs;
+    DestroyPixmapProcPtr destroyPixmap;
+} ShmScrPrivateRec;
+
+static PixmapPtr fbShmCreatePixmap(XSHM_CREATE_PIXMAP_ARGS);
+static int ShmDetachSegment(
+    pointer		/* value */,
+    XID			/* shmseg */
+    );
+static void ShmResetProc(
+    ExtensionEntry *	/* extEntry */
+    );
+static void SShmCompletionEvent(
+    xShmCompletionEvent * /* from */,
+    xShmCompletionEvent * /* to */
+    );
+
+static Bool ShmDestroyPixmap (PixmapPtr pPixmap);
+
+
+static unsigned char ShmReqCode;
+int ShmCompletionCode;
+int BadShmSegCode;
+RESTYPE ShmSegType;
+static ShmDescPtr Shmsegs;
+static Bool sharedPixmaps;
+static DevPrivateKeyRec shmScrPrivateKeyRec;
+#define shmScrPrivateKey (&shmScrPrivateKeyRec)
+static DevPrivateKeyRec shmPixmapPrivateKeyRec;
+#define shmPixmapPrivateKey (&shmPixmapPrivateKeyRec)
+static ShmFuncs miFuncs = {NULL, NULL};
+static ShmFuncs fbFuncs = {fbShmCreatePixmap, NULL};
+
+#define ShmGetScreenPriv(s) ((ShmScrPrivateRec *)dixLookupPrivate(&(s)->devPrivates, shmScrPrivateKey))
+
+#define VERIFY_SHMSEG(shmseg,shmdesc,client) \
+{ \
+    int rc; \
+    rc = dixLookupResourceByType((pointer *)&(shmdesc), shmseg, ShmSegType, \
+                                 client, DixReadAccess); \
+    if (rc != Success) \
+	return rc; \
+}
+
+#define VERIFY_SHMPTR(shmseg,offset,needwrite,shmdesc,client) \
+{ \
+    VERIFY_SHMSEG(shmseg, shmdesc, client); \
+    if ((offset & 3) || (offset > shmdesc->size)) \
+    { \
+	client->errorValue = offset; \
+	return BadValue; \
+    } \
+    if (needwrite && !shmdesc->writable) \
+	return BadAccess; \
+}
+
+#define VERIFY_SHMSIZE(shmdesc,offset,len,client) \
+{ \
+    if ((offset + len) > shmdesc->size) \
+    { \
+	return BadAccess; \
+    } \
+}
+
+
+#if defined(__FreeBSD__) || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__CYGWIN__) || defined(__DragonFly__)
+#include <sys/signal.h>
+
+static Bool badSysCall = FALSE;
+
+static void
+SigSysHandler(int signo)
+{
+    badSysCall = TRUE;
+}
+
+static Bool CheckForShmSyscall(void)
+{
+    void (*oldHandler)();
+    int shmid = -1;
+
+    /* If no SHM support in the kernel, the bad syscall will generate SIGSYS */
+    oldHandler = signal(SIGSYS, SigSysHandler);
+
+    badSysCall = FALSE;
+    shmid = shmget(IPC_PRIVATE, 4096, IPC_CREAT);
+
+    if (shmid != -1)
+    {
+        /* Successful allocation - clean up */
+	shmctl(shmid, IPC_RMID, NULL);
+    }
+    else
+    {
+        /* Allocation failed */
+        badSysCall = TRUE;
+    }
+    signal(SIGSYS, oldHandler);
+    return !badSysCall;
+}
+
+#define MUST_CHECK_FOR_SHM_SYSCALL
+
+#endif
+
+static Bool
+ShmCloseScreen(int i, ScreenPtr pScreen)
+{
+    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(pScreen);
+    pScreen->CloseScreen = screen_priv->CloseScreen;
+    dixSetPrivate(&pScreen->devPrivates, shmScrPrivateKey, NULL);
+    free(screen_priv);
+    return (*pScreen->CloseScreen) (i, pScreen);
+}
+
+static ShmScrPrivateRec *
+ShmInitScreenPriv(ScreenPtr pScreen)
+{
+    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(pScreen);
+    if (!screen_priv)
+    {
+	screen_priv = calloc(1, sizeof (ShmScrPrivateRec));
+	screen_priv->CloseScreen = pScreen->CloseScreen;
+	dixSetPrivate(&pScreen->devPrivates, shmScrPrivateKey, screen_priv);
+	pScreen->CloseScreen = ShmCloseScreen;
+    }
+    return screen_priv;
+}
+
+static Bool
+ShmRegisterPrivates(void)
+{
+    if (!dixRegisterPrivateKey(&shmScrPrivateKeyRec, PRIVATE_SCREEN, 0))
+	return FALSE;
+    if (!dixRegisterPrivateKey(&shmPixmapPrivateKeyRec, PRIVATE_PIXMAP, 0))
+	return FALSE;
+    return TRUE;
+}
+
+/*ARGSUSED*/
+static void
+ShmResetProc(ExtensionEntry *extEntry)
+{
+    int i;
+    for (i = 0; i < screenInfo.numScreens; i++)
+	ShmRegisterFuncs(screenInfo.screens[i], NULL);
+}
+
+void
+ShmRegisterFuncs(ScreenPtr pScreen, ShmFuncsPtr funcs)
+{
+    if (!ShmRegisterPrivates())
+	return;
+    ShmInitScreenPriv(pScreen)->shmFuncs = funcs;
+}
+
+static Bool
+ShmDestroyPixmap (PixmapPtr pPixmap)
+{
+    ScreenPtr	    pScreen = pPixmap->drawable.pScreen;
+    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(pScreen);
+    Bool	    ret;
+    if (pPixmap->refcnt == 1)
+    {
+	ShmDescPtr  shmdesc;
+	shmdesc = (ShmDescPtr)dixLookupPrivate(&pPixmap->devPrivates,
+					       shmPixmapPrivateKey);
+	if (shmdesc)
+	    ShmDetachSegment ((pointer) shmdesc, pPixmap->drawable.id);
+    }
+    
+    pScreen->DestroyPixmap = screen_priv->destroyPixmap;
+    ret = (*pScreen->DestroyPixmap) (pPixmap);
+    screen_priv->destroyPixmap = pScreen->DestroyPixmap;
+    pScreen->DestroyPixmap = ShmDestroyPixmap;
+    return ret;
+}
+
+void
+ShmRegisterFbFuncs(ScreenPtr pScreen)
+{
+    ShmRegisterFuncs(pScreen, &fbFuncs);
+}
+
+static int
+ProcShmQueryVersion(ClientPtr client)
+{
+    xShmQueryVersionReply rep;
+    int n;
+
+    REQUEST_SIZE_MATCH(xShmQueryVersionReq);
+    memset(&rep, 0, sizeof(xShmQueryVersionReply));
+    rep.type = X_Reply;
+    rep.length = 0;
+    rep.sequenceNumber = client->sequence;
+    rep.sharedPixmaps = sharedPixmaps;
+    rep.pixmapFormat = sharedPixmaps ? ZPixmap : 0;
+    rep.majorVersion = SERVER_SHM_MAJOR_VERSION;
+    rep.minorVersion = SERVER_SHM_MINOR_VERSION;
+    rep.uid = geteuid();
+    rep.gid = getegid();
+    if (client->swapped) {
+    	swaps(&rep.sequenceNumber, n);
+    	swapl(&rep.length, n);
+	swaps(&rep.majorVersion, n);
+	swaps(&rep.minorVersion, n);
+	swaps(&rep.uid, n);
+	swaps(&rep.gid, n);
+    }
+    WriteToClient(client, sizeof(xShmQueryVersionReply), (char *)&rep);
+    return Success;
+}
+
+/*
+ * Simulate the access() system call for a shared memory segement,
+ * using the credentials from the client if available
+ */
+static int
+shm_access(ClientPtr client, SHMPERM_TYPE *perm, int readonly)
+{
+    int uid, gid;
+    mode_t mask;
+    int uidset = 0, gidset = 0;
+    LocalClientCredRec *lcc;
+    
+    if (GetLocalClientCreds(client, &lcc) != -1) {
+
+	if (lcc->fieldsSet & LCC_UID_SET) {
+	    uid = lcc->euid;
+	    uidset = 1;
+	}
+	if (lcc->fieldsSet & LCC_GID_SET) {
+	    gid = lcc->egid;
+	    gidset = 1;
+	}
+
+#if defined(HAVE_GETZONEID) && defined(SHMPERM_ZONEID)
+	if ( ((lcc->fieldsSet & LCC_ZID_SET) == 0) || (lcc->zoneid == -1)
+	     || (lcc->zoneid != SHMPERM_ZONEID(perm))) {
+		uidset = 0;
+		gidset = 0;
+	}
+#endif
+	FreeLocalClientCreds(lcc);
+	
+	if (uidset) {
+	    /* User id 0 always gets access */
+	    if (uid == 0) {
+		return 0;
+	    }
+	    /* Check the owner */
+	    if (SHMPERM_UID(perm) == uid || SHMPERM_CUID(perm) == uid) {
+		mask = S_IRUSR;
+		if (!readonly) {
+		    mask |= S_IWUSR;
+		}
+		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;
+	    }
+	}
+
+	if (gidset) {
+	    /* Check the group */
+	    if (SHMPERM_GID(perm) == gid || SHMPERM_CGID(perm) == gid) {
+		mask = S_IRGRP;
+		if (!readonly) {
+		    mask |= S_IWGRP;
+		}
+		return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;
+	    }
+	}
+    }
+    /* Otherwise, check everyone else */
+    mask = S_IROTH;
+    if (!readonly) {
+	mask |= S_IWOTH;
+    }
+    return (SHMPERM_MODE(perm) & mask) == mask ? 0 : -1;
+}
+
+static int
+ProcShmAttach(ClientPtr client)
+{
+    SHMSTAT_TYPE buf;
+    ShmDescPtr shmdesc;
+    REQUEST(xShmAttachReq);
+
+    REQUEST_SIZE_MATCH(xShmAttachReq);
+    LEGAL_NEW_RESOURCE(stuff->shmseg, client);
+    if ((stuff->readOnly != xTrue) && (stuff->readOnly != xFalse))
+    {
+	client->errorValue = stuff->readOnly;
+        return BadValue;
+    }
+    for (shmdesc = Shmsegs;
+	 shmdesc && (shmdesc->shmid != stuff->shmid);
+	 shmdesc = shmdesc->next)
+	;
+    if (shmdesc)
+    {
+	if (!stuff->readOnly && !shmdesc->writable)
+	    return BadAccess;
+	shmdesc->refcnt++;
+    }
+    else
+    {
+	shmdesc = malloc(sizeof(ShmDescRec));
+	if (!shmdesc)
+	    return BadAlloc;
+	shmdesc->addr = shmat(stuff->shmid, 0,
+			      stuff->readOnly ? SHM_RDONLY : 0);
+	if ((shmdesc->addr == ((char *)-1)) ||
+	    SHMSTAT(stuff->shmid, &buf))
+	{
+	    free(shmdesc);
+	    return BadAccess;
+	}
+
+	/* The attach was performed with root privs. We must
+	 * do manual checking of access rights for the credentials 
+	 * of the client */
+
+	if (shm_access(client, &(SHM_PERM(buf)), stuff->readOnly) == -1) {
+	    shmdt(shmdesc->addr);
+	    free(shmdesc);
+	    return BadAccess;
+	}
+
+	shmdesc->shmid = stuff->shmid;
+	shmdesc->refcnt = 1;
+	shmdesc->writable = !stuff->readOnly;
+	shmdesc->size = SHM_SEGSZ(buf);
+	shmdesc->next = Shmsegs;
+	Shmsegs = shmdesc;
+    }
+    if (!AddResource(stuff->shmseg, ShmSegType, (pointer)shmdesc))
+	return BadAlloc;
+    return Success;
+}
+
+/*ARGSUSED*/
+static int
+ShmDetachSegment(pointer value, /* must conform to DeleteType */
+		 XID shmseg)
+{
+    ShmDescPtr shmdesc = (ShmDescPtr)value;
+    ShmDescPtr *prev;
+
+    if (--shmdesc->refcnt)
+	return TRUE;
+    shmdt(shmdesc->addr);
+    for (prev = &Shmsegs; *prev != shmdesc; prev = &(*prev)->next)
+	;
+    *prev = shmdesc->next;
+    free(shmdesc);
+    return Success;
+}
+
+static int
+ProcShmDetach(ClientPtr client)
+{
+    ShmDescPtr shmdesc;
+    REQUEST(xShmDetachReq);
+
+    REQUEST_SIZE_MATCH(xShmDetachReq);
+    VERIFY_SHMSEG(stuff->shmseg, shmdesc, client);
+    FreeResource(stuff->shmseg, RT_NONE);
+    return Success;
+}
+
+/*
+ * If the given request doesn't exactly match PutImage's constraints,
+ * wrap the image in a scratch pixmap header and let CopyArea sort it out.
+ */
+static void
+doShmPutImage(DrawablePtr dst, GCPtr pGC,
+	      int depth, unsigned int format,
+	      int w, int h, int sx, int sy, int sw, int sh, int dx, int dy,
+	      char *data)
+{
+    PixmapPtr pPixmap;
+
+    if (format == ZPixmap || depth == 1) {
+	pPixmap = GetScratchPixmapHeader(dst->pScreen, w, h, depth,
+					 BitsPerPixel(depth),
+					 PixmapBytePad(w, depth),
+					 data);
+	if (!pPixmap)
+	    return;
+	pGC->ops->CopyArea((DrawablePtr)pPixmap, dst, pGC, sx, sy, sw, sh, dx, dy);
+	FreeScratchPixmapHeader(pPixmap);
+    } else {
+	GCPtr putGC = GetScratchGC(depth, dst->pScreen);
+
+	if (!putGC)
+	    return;
+
+	pPixmap = (*dst->pScreen->CreatePixmap)(dst->pScreen, sw, sh, depth,
+						CREATE_PIXMAP_USAGE_SCRATCH);
+	if (!pPixmap) {
+	    FreeScratchGC(putGC);
+	    return;
+	}
+	ValidateGC(&pPixmap->drawable, putGC);
+	(*putGC->ops->PutImage)(&pPixmap->drawable, putGC, depth, -sx, -sy, w, h, 0,
+				(format == XYPixmap) ? XYPixmap : ZPixmap, data);
+	FreeScratchGC(putGC);
+	if (format == XYBitmap)
+	    (void)(*pGC->ops->CopyPlane)(&pPixmap->drawable, dst, pGC, 0, 0, sw, sh,
+					 dx, dy, 1L);
+	else
+	    (void)(*pGC->ops->CopyArea)(&pPixmap->drawable, dst, pGC, 0, 0, sw, sh,
+					dx, dy);
+	(*pPixmap->drawable.pScreen->DestroyPixmap)(pPixmap);
+    }
+}
+
+static int
+ProcShmPutImage(ClientPtr client)
+{
+    GCPtr pGC;
+    DrawablePtr pDraw;
+    long length;
+    ShmDescPtr shmdesc;
+    REQUEST(xShmPutImageReq);
+
+    REQUEST_SIZE_MATCH(xShmPutImageReq);
+    VALIDATE_DRAWABLE_AND_GC(stuff->drawable, pDraw, DixWriteAccess);
+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, FALSE, shmdesc, client);
+    if ((stuff->sendEvent != xTrue) && (stuff->sendEvent != xFalse))
+	return BadValue;
+    if (stuff->format == XYBitmap)
+    {
+        if (stuff->depth != 1)
+            return BadMatch;
+        length = PixmapBytePad(stuff->totalWidth, 1);
+    }
+    else if (stuff->format == XYPixmap)
+    {
+        if (pDraw->depth != stuff->depth)
+            return BadMatch;
+        length = PixmapBytePad(stuff->totalWidth, 1);
+	length *= stuff->depth;
+    }
+    else if (stuff->format == ZPixmap)
+    {
+        if (pDraw->depth != stuff->depth)
+            return BadMatch;
+        length = PixmapBytePad(stuff->totalWidth, stuff->depth);
+    }
+    else
+    {
+	client->errorValue = stuff->format;
+        return BadValue;
+    }
+
+    /*
+     * There's a potential integer overflow in this check:
+     * VERIFY_SHMSIZE(shmdesc, stuff->offset, length * stuff->totalHeight,
+     *                client);
+     * the version below ought to avoid it
+     */
+    if (stuff->totalHeight != 0 &&
+	length > (shmdesc->size - stuff->offset)/stuff->totalHeight) {
+	client->errorValue = stuff->totalWidth;
+	return BadValue;
+    }
+    if (stuff->srcX > stuff->totalWidth)
+    {
+	client->errorValue = stuff->srcX;
+	return BadValue;
+    }
+    if (stuff->srcY > stuff->totalHeight)
+    {
+	client->errorValue = stuff->srcY;
+	return BadValue;
+    }
+    if ((stuff->srcX + stuff->srcWidth) > stuff->totalWidth)
+    {
+	client->errorValue = stuff->srcWidth;
+	return BadValue;
+    }
+    if ((stuff->srcY + stuff->srcHeight) > stuff->totalHeight)
+    {
+	client->errorValue = stuff->srcHeight;
+	return BadValue;
+    }
+
+    if ((((stuff->format == ZPixmap) && (stuff->srcX == 0)) ||
+	 ((stuff->format != ZPixmap) &&
+	  (stuff->srcX < screenInfo.bitmapScanlinePad) &&
+	  ((stuff->format == XYBitmap) ||
+	   ((stuff->srcY == 0) &&
+	    (stuff->srcHeight == stuff->totalHeight))))) &&
+	((stuff->srcX + stuff->srcWidth) == stuff->totalWidth))
+	(*pGC->ops->PutImage) (pDraw, pGC, stuff->depth,
+			       stuff->dstX, stuff->dstY,
+			       stuff->totalWidth, stuff->srcHeight,
+			       stuff->srcX, stuff->format,
+			       shmdesc->addr + stuff->offset +
+			       (stuff->srcY * length));
+    else
+	doShmPutImage(pDraw, pGC, stuff->depth, stuff->format,
+		      stuff->totalWidth, stuff->totalHeight,
+		      stuff->srcX, stuff->srcY,
+		      stuff->srcWidth, stuff->srcHeight,
+		      stuff->dstX, stuff->dstY,
+                      shmdesc->addr + stuff->offset);
+
+    if (stuff->sendEvent)
+    {
+	xShmCompletionEvent ev;
+
+	ev.type = ShmCompletionCode;
+	ev.drawable = stuff->drawable;
+	ev.minorEvent = X_ShmPutImage;
+	ev.majorEvent = ShmReqCode;
+	ev.shmseg = stuff->shmseg;
+	ev.offset = stuff->offset;
+	WriteEventsToClient(client, 1, (xEvent *) &ev);
+    }
+
+    return Success;
+}
+
+static int
+ProcShmGetImage(ClientPtr client)
+{
+    DrawablePtr		pDraw;
+    long		lenPer = 0, length;
+    Mask		plane = 0;
+    xShmGetImageReply	xgi;
+    ShmDescPtr		shmdesc;
+    int			n, rc;
+
+    REQUEST(xShmGetImageReq);
+
+    REQUEST_SIZE_MATCH(xShmGetImageReq);
+    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap))
+    {
+	client->errorValue = stuff->format;
+        return BadValue;
+    }
+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,
+			   DixReadAccess);
+    if (rc != Success)
+	return rc;
+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
+    if (pDraw->type == DRAWABLE_WINDOW)
+    {
+      if( /* check for being viewable */
+	 !((WindowPtr) pDraw)->realized ||
+	  /* check for being on screen */
+         pDraw->x + stuff->x < 0 ||
+         pDraw->x + stuff->x + (int)stuff->width > pDraw->pScreen->width ||
+         pDraw->y + stuff->y < 0 ||
+         pDraw->y + stuff->y + (int)stuff->height > pDraw->pScreen->height ||
+          /* check for being inside of border */
+         stuff->x < - wBorderWidth((WindowPtr)pDraw) ||
+         stuff->x + (int)stuff->width >
+		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||
+         stuff->y < -wBorderWidth((WindowPtr)pDraw) ||
+         stuff->y + (int)stuff->height >
+		wBorderWidth((WindowPtr)pDraw) + (int)pDraw->height
+        )
+	    return BadMatch;
+	xgi.visual = wVisual(((WindowPtr)pDraw));
+    }
+    else
+    {
+	if (stuff->x < 0 ||
+	    stuff->x+(int)stuff->width > pDraw->width ||
+	    stuff->y < 0 ||
+	    stuff->y+(int)stuff->height > pDraw->height
+	    )
+	    return BadMatch;
+	xgi.visual = None;
+    }
+    xgi.type = X_Reply;
+    xgi.length = 0;
+    xgi.sequenceNumber = client->sequence;
+    xgi.depth = pDraw->depth;
+    if(stuff->format == ZPixmap)
+    {
+	length = PixmapBytePad(stuff->width, pDraw->depth) * stuff->height;
+    }
+    else
+    {
+	lenPer = PixmapBytePad(stuff->width, 1) * stuff->height;
+	plane = ((Mask)1) << (pDraw->depth - 1);
+	/* only planes asked for */
+	length = lenPer * Ones(stuff->planeMask & (plane | (plane - 1)));
+    }
+
+    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);
+    xgi.size = length;
+
+    if (length == 0)
+    {
+	/* nothing to do */
+    }
+    else if (stuff->format == ZPixmap)
+    {
+	(*pDraw->pScreen->GetImage)(pDraw, stuff->x, stuff->y,
+				    stuff->width, stuff->height,
+				    stuff->format, stuff->planeMask,
+				    shmdesc->addr + stuff->offset);
+    }
+    else
+    {
+
+	length = stuff->offset;
+        for (; plane; plane >>= 1)
+	{
+	    if (stuff->planeMask & plane)
+	    {
+		(*pDraw->pScreen->GetImage)(pDraw,
+					    stuff->x, stuff->y,
+					    stuff->width, stuff->height,
+					    stuff->format, plane,
+					    shmdesc->addr + length);
+		length += lenPer;
+	    }
+	}
+    }
+
+    if (client->swapped) {
+	swaps(&xgi.sequenceNumber, n);
+	swapl(&xgi.length, n);
+	swapl(&xgi.visual, n);
+	swapl(&xgi.size, n);
+    }
+    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);
+
+    return Success;
+}
+
+#ifdef PANORAMIX
+static int 
+ProcPanoramiXShmPutImage(ClientPtr client)
+{
+    int			 j, result, orig_x, orig_y;
+    PanoramiXRes	*draw, *gc;
+    Bool		 sendEvent, isRoot;
+
+    REQUEST(xShmPutImageReq);
+    REQUEST_SIZE_MATCH(xShmPutImageReq);
+
+    result = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,
+				      XRC_DRAWABLE, client, DixWriteAccess);
+    if (result != Success)
+        return (result == BadValue) ? BadDrawable : result;
+
+    result = dixLookupResourceByType((pointer *)&gc, stuff->gc,
+				     XRT_GC, client, DixReadAccess);
+    if (result != Success)
+        return result;
+
+    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;
+
+    orig_x = stuff->dstX;
+    orig_y = stuff->dstY;
+    sendEvent = stuff->sendEvent;
+    stuff->sendEvent = 0;
+    FOR_NSCREENS(j) {
+	if(!j) stuff->sendEvent = sendEvent;
+	stuff->drawable = draw->info[j].id;
+	stuff->gc = gc->info[j].id;
+	if (isRoot) {
+	    stuff->dstX = orig_x - screenInfo.screens[j]->x;
+	    stuff->dstY = orig_y - screenInfo.screens[j]->y;
+	}
+	result = ProcShmPutImage(client);
+	if(result != Success) break;
+    }
+    return result;
+}
+
+static int 
+ProcPanoramiXShmGetImage(ClientPtr client)
+{
+    PanoramiXRes	*draw;
+    DrawablePtr 	*drawables;
+    DrawablePtr 	pDraw;
+    xShmGetImageReply	xgi;
+    ShmDescPtr		shmdesc;
+    int         	i, x, y, w, h, format, rc;
+    Mask		plane = 0, planemask;
+    long		lenPer = 0, length, widthBytesLine;
+    Bool		isRoot;
+
+    REQUEST(xShmGetImageReq);
+
+    REQUEST_SIZE_MATCH(xShmGetImageReq);
+
+    if ((stuff->format != XYPixmap) && (stuff->format != ZPixmap)) {
+	client->errorValue = stuff->format;
+        return BadValue;
+    }
+
+    rc = dixLookupResourceByClass((pointer *)&draw, stuff->drawable,
+				  XRC_DRAWABLE, client, DixWriteAccess);
+    if (rc != Success)
+	return (rc == BadValue) ? BadDrawable : rc;
+
+    if (draw->type == XRT_PIXMAP)
+	return ProcShmGetImage(client);
+
+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, 0,
+			   DixReadAccess);
+    if (rc != Success)
+	return rc;
+
+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
+
+    x = stuff->x;
+    y = stuff->y;
+    w = stuff->width;
+    h = stuff->height;
+    format = stuff->format;
+    planemask = stuff->planeMask;
+
+    isRoot = (draw->type == XRT_WINDOW) && draw->u.win.root;
+
+    if(isRoot) {
+      if( /* check for being onscreen */
+	x < 0 || x + w > PanoramiXPixWidth ||
+	y < 0 || y + h > PanoramiXPixHeight )
+	    return BadMatch;
+    } else {
+      if( /* check for being onscreen */
+	screenInfo.screens[0]->x + pDraw->x + x < 0 ||
+	screenInfo.screens[0]->x + pDraw->x + x + w > PanoramiXPixWidth ||
+	screenInfo.screens[0]->y + pDraw->y + y < 0 ||
+	screenInfo.screens[0]->y + pDraw->y + y + h > PanoramiXPixHeight ||
+	 /* check for being inside of border */
+       	x < - wBorderWidth((WindowPtr)pDraw) ||
+	x + w > wBorderWidth((WindowPtr)pDraw) + (int)pDraw->width ||
+	y < -wBorderWidth((WindowPtr)pDraw) ||
+	y + h > wBorderWidth ((WindowPtr)pDraw) + (int)pDraw->height)
+	    return BadMatch;
+    }
+
+    drawables = calloc(PanoramiXNumScreens, sizeof(DrawablePtr));
+    if(!drawables)
+	return BadAlloc;
+
+    drawables[0] = pDraw;
+    FOR_NSCREENS_FORWARD_SKIP(i) {
+	rc = dixLookupDrawable(drawables+i, draw->info[i].id, client, 0, 
+			       DixReadAccess);
+	if (rc != Success)
+	{
+	    free(drawables);
+	    return rc;
+	}
+    }
+
+    xgi.visual = wVisual(((WindowPtr)pDraw));
+    xgi.type = X_Reply;
+    xgi.length = 0;
+    xgi.sequenceNumber = client->sequence;
+    xgi.depth = pDraw->depth;
+
+    if(format == ZPixmap) {
+	widthBytesLine = PixmapBytePad(w, pDraw->depth);
+	length = widthBytesLine * h;
+    } else {
+	widthBytesLine = PixmapBytePad(w, 1);
+	lenPer = widthBytesLine * h;
+	plane = ((Mask)1) << (pDraw->depth - 1);
+	length = lenPer * Ones(planemask & (plane | (plane - 1)));
+    }
+
+    VERIFY_SHMSIZE(shmdesc, stuff->offset, length, client);
+    xgi.size = length;
+
+    if (length == 0) {/* nothing to do */ }
+    else if (format == ZPixmap) {
+	    XineramaGetImageData(drawables, x, y, w, h, format, planemask,
+					shmdesc->addr + stuff->offset,
+					widthBytesLine, isRoot);
+    } else {
+
+	length = stuff->offset;
+        for (; plane; plane >>= 1) {
+	    if (planemask & plane) {
+		XineramaGetImageData(drawables, x, y, w, h, 
+				     format, plane, shmdesc->addr + length,
+				     widthBytesLine, isRoot);
+		length += lenPer;
+	    }
+	}
+    }
+    free(drawables);
+    
+    if (client->swapped) {
+	int n;
+    	swaps(&xgi.sequenceNumber, n);
+    	swapl(&xgi.length, n);
+	swapl(&xgi.visual, n);
+	swapl(&xgi.size, n);
+    }
+    WriteToClient(client, sizeof(xShmGetImageReply), (char *)&xgi);
+
+    return Success;
+}
+
+static int
+ProcPanoramiXShmCreatePixmap(ClientPtr client)
+{
+    ScreenPtr pScreen = NULL;
+    PixmapPtr pMap = NULL;
+    DrawablePtr pDraw;
+    DepthPtr pDepth;
+    int i, j, result, rc;
+    ShmDescPtr shmdesc;
+    REQUEST(xShmCreatePixmapReq);
+    unsigned int width, height, depth;
+    unsigned long size;
+    PanoramiXRes *newPix;
+
+    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);
+    client->errorValue = stuff->pid;
+    if (!sharedPixmaps)
+	return BadImplementation;
+    LEGAL_NEW_RESOURCE(stuff->pid, client);
+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,
+			   DixGetAttrAccess);
+    if (rc != Success)
+	return rc;
+
+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
+
+    width = stuff->width;
+    height = stuff->height;
+    depth = stuff->depth;
+    if (!width || !height || !depth)
+    {
+	client->errorValue = 0;
+        return BadValue;
+    }
+    if (width > 32767 || height > 32767)
+        return BadAlloc;
+
+    if (stuff->depth != 1)
+    {
+        pDepth = pDraw->pScreen->allowedDepths;
+        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)
+	   if (pDepth->depth == stuff->depth)
+               goto CreatePmap;
+	client->errorValue = stuff->depth;
+        return BadValue;
+    }
+
+CreatePmap:
+    size = PixmapBytePad(width, depth) * height;
+    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {
+        if (size < width * height)
+            return BadAlloc;
+    }
+    /* thankfully, offset is unsigned */
+    if (stuff->offset + size < size)
+	return BadAlloc;
+
+    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);
+
+    if(!(newPix = malloc(sizeof(PanoramiXRes))))
+	return BadAlloc;
+
+    newPix->type = XRT_PIXMAP;
+    newPix->u.pix.shared = TRUE;
+    panoramix_setup_ids(newPix, client, stuff->pid);
+
+    result = Success;
+
+    FOR_NSCREENS(j) {
+	ShmScrPrivateRec *screen_priv;
+	pScreen = screenInfo.screens[j];
+
+	screen_priv = ShmGetScreenPriv(pScreen);
+	pMap = (*screen_priv->shmFuncs->CreatePixmap)(pScreen,
+				stuff->width, stuff->height, stuff->depth,
+				shmdesc->addr + stuff->offset);
+
+	if (pMap) {
+	    dixSetPrivate(&pMap->devPrivates, shmPixmapPrivateKey, shmdesc);
+            shmdesc->refcnt++;
+	    pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;
+	    pMap->drawable.id = newPix->info[j].id;
+	    if (!AddResource(newPix->info[j].id, RT_PIXMAP, (pointer)pMap)) {
+		(*pScreen->DestroyPixmap)(pMap);
+		result = BadAlloc;
+		break;
+	    }
+	} else {
+	   result = BadAlloc;
+	   break;
+	}
+    }
+
+    if(result == BadAlloc) {
+	while(j--) {
+	    (*pScreen->DestroyPixmap)(pMap);
+	    FreeResource(newPix->info[j].id, RT_NONE);
+	}
+	free(newPix);
+    } else 
+	AddResource(stuff->pid, XRT_PIXMAP, newPix);
+
+    return result;
+}
+#endif
+
+static PixmapPtr
+fbShmCreatePixmap (ScreenPtr pScreen,
+		   int width, int height, int depth, char *addr)
+{
+    PixmapPtr pPixmap;
+
+    pPixmap = (*pScreen->CreatePixmap)(pScreen, 0, 0, pScreen->rootDepth, 0);
+    if (!pPixmap)
+	return NullPixmap;
+
+    if (!(*pScreen->ModifyPixmapHeader)(pPixmap, width, height, depth,
+	    BitsPerPixel(depth), PixmapBytePad(width, depth), (pointer)addr)) {
+	(*pScreen->DestroyPixmap)(pPixmap);
+	return NullPixmap;
+    }
+    return pPixmap;
+}
+
+static int
+ProcShmCreatePixmap(ClientPtr client)
+{
+    PixmapPtr pMap;
+    DrawablePtr pDraw;
+    DepthPtr pDepth;
+    int i, rc;
+    ShmDescPtr shmdesc;
+    ShmScrPrivateRec *screen_priv;
+    REQUEST(xShmCreatePixmapReq);
+    unsigned int width, height, depth;
+    unsigned long size;
+
+    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);
+    client->errorValue = stuff->pid;
+    if (!sharedPixmaps)
+	return BadImplementation;
+    LEGAL_NEW_RESOURCE(stuff->pid, client);
+    rc = dixLookupDrawable(&pDraw, stuff->drawable, client, M_ANY,
+			   DixGetAttrAccess);
+    if (rc != Success)
+	return rc;
+
+    VERIFY_SHMPTR(stuff->shmseg, stuff->offset, TRUE, shmdesc, client);
+    
+    width = stuff->width;
+    height = stuff->height;
+    depth = stuff->depth;
+    if (!width || !height || !depth)
+    {
+	client->errorValue = 0;
+        return BadValue;
+    }
+    if (width > 32767 || height > 32767)
+	return BadAlloc;
+
+    if (stuff->depth != 1)
+    {
+        pDepth = pDraw->pScreen->allowedDepths;
+        for (i=0; i<pDraw->pScreen->numDepths; i++, pDepth++)
+	   if (pDepth->depth == stuff->depth)
+               goto CreatePmap;
+	client->errorValue = stuff->depth;
+        return BadValue;
+    }
+
+CreatePmap:
+    size = PixmapBytePad(width, depth) * height;
+    if (sizeof(size) == 4 && BitsPerPixel(depth) > 8) {
+	if (size < width * height)
+	    return BadAlloc;
+    }
+    /* thankfully, offset is unsigned */
+    if (stuff->offset + size < size)
+	return BadAlloc;
+
+    VERIFY_SHMSIZE(shmdesc, stuff->offset, size, client);
+    screen_priv = ShmGetScreenPriv(pDraw->pScreen);
+    pMap = (*screen_priv->shmFuncs->CreatePixmap)(
+			    pDraw->pScreen, stuff->width,
+			    stuff->height, stuff->depth,
+			    shmdesc->addr + stuff->offset);
+    if (pMap)
+    {
+	rc = XaceHook(XACE_RESOURCE_ACCESS, client, stuff->pid, RT_PIXMAP,
+		      pMap, RT_NONE, NULL, DixCreateAccess);
+	if (rc != Success) {
+	    pDraw->pScreen->DestroyPixmap(pMap);
+	    return rc;
+	}
+	dixSetPrivate(&pMap->devPrivates, shmPixmapPrivateKey, shmdesc);
+	shmdesc->refcnt++;
+	pMap->drawable.serialNumber = NEXT_SERIAL_NUMBER;
+	pMap->drawable.id = stuff->pid;
+	if (AddResource(stuff->pid, RT_PIXMAP, (pointer)pMap))
+	{
+	    return Success;
+	}
+	pDraw->pScreen->DestroyPixmap(pMap);
+    }
+    return BadAlloc;
+}
+
+static int
+ProcShmDispatch (ClientPtr client)
+{
+    REQUEST(xReq);
+    switch (stuff->data)
+    {
+    case X_ShmQueryVersion:
+	return ProcShmQueryVersion(client);
+    case X_ShmAttach:
+	return ProcShmAttach(client);
+    case X_ShmDetach:
+	return ProcShmDetach(client);
+    case X_ShmPutImage:
+#ifdef PANORAMIX
+        if ( !noPanoramiXExtension )
+	   return ProcPanoramiXShmPutImage(client);
+#endif
+	return ProcShmPutImage(client);
+    case X_ShmGetImage:
+#ifdef PANORAMIX
+        if ( !noPanoramiXExtension )
+	   return ProcPanoramiXShmGetImage(client);
+#endif
+	return ProcShmGetImage(client);
+    case X_ShmCreatePixmap:
+#ifdef PANORAMIX
+        if ( !noPanoramiXExtension )
+	   return ProcPanoramiXShmCreatePixmap(client);
+#endif
+	   return ProcShmCreatePixmap(client);
+    default:
+	return BadRequest;
+    }
+}
+
+static void
+SShmCompletionEvent(xShmCompletionEvent *from, xShmCompletionEvent *to)
+{
+    to->type = from->type;
+    cpswaps(from->sequenceNumber, to->sequenceNumber);
+    cpswapl(from->drawable, to->drawable);
+    cpswaps(from->minorEvent, to->minorEvent);
+    to->majorEvent = from->majorEvent;
+    cpswapl(from->shmseg, to->shmseg);
+    cpswapl(from->offset, to->offset);
+}
+
+static int
+SProcShmQueryVersion(ClientPtr client)
+{
+    int n;
+    REQUEST(xShmQueryVersionReq);
+
+    swaps(&stuff->length, n);
+    return ProcShmQueryVersion(client);
+}
+
+static int
+SProcShmAttach(ClientPtr client)
+{
+    int n;
+    REQUEST(xShmAttachReq);
+    swaps(&stuff->length, n);
+    REQUEST_SIZE_MATCH(xShmAttachReq);
+    swapl(&stuff->shmseg, n);
+    swapl(&stuff->shmid, n);
+    return ProcShmAttach(client);
+}
+
+static int
+SProcShmDetach(ClientPtr client)
+{
+    int n;
+    REQUEST(xShmDetachReq);
+    swaps(&stuff->length, n);
+    REQUEST_SIZE_MATCH(xShmDetachReq);
+    swapl(&stuff->shmseg, n);
+    return ProcShmDetach(client);
+}
+
+static int
+SProcShmPutImage(ClientPtr client)
+{
+    int n;
+    REQUEST(xShmPutImageReq);
+    swaps(&stuff->length, n);
+    REQUEST_SIZE_MATCH(xShmPutImageReq);
+    swapl(&stuff->drawable, n);
+    swapl(&stuff->gc, n);
+    swaps(&stuff->totalWidth, n);
+    swaps(&stuff->totalHeight, n);
+    swaps(&stuff->srcX, n);
+    swaps(&stuff->srcY, n);
+    swaps(&stuff->srcWidth, n);
+    swaps(&stuff->srcHeight, n);
+    swaps(&stuff->dstX, n);
+    swaps(&stuff->dstY, n);
+    swapl(&stuff->shmseg, n);
+    swapl(&stuff->offset, n);
+    return ProcShmPutImage(client);
+}
+
+static int
+SProcShmGetImage(ClientPtr client)
+{
+    int n;
+    REQUEST(xShmGetImageReq);
+    swaps(&stuff->length, n);
+    REQUEST_SIZE_MATCH(xShmGetImageReq);
+    swapl(&stuff->drawable, n);
+    swaps(&stuff->x, n);
+    swaps(&stuff->y, n);
+    swaps(&stuff->width, n);
+    swaps(&stuff->height, n);
+    swapl(&stuff->planeMask, n);
+    swapl(&stuff->shmseg, n);
+    swapl(&stuff->offset, n);
+    return ProcShmGetImage(client);
+}
+
+static int
+SProcShmCreatePixmap(ClientPtr client)
+{
+    int n;
+    REQUEST(xShmCreatePixmapReq);
+    swaps(&stuff->length, n);
+    REQUEST_SIZE_MATCH(xShmCreatePixmapReq);
+    swapl(&stuff->pid, n);
+    swapl(&stuff->drawable, n);
+    swaps(&stuff->width, n);
+    swaps(&stuff->height, n);
+    swapl(&stuff->shmseg, n);
+    swapl(&stuff->offset, n);
+    return ProcShmCreatePixmap(client);
+}
+
+static int
+SProcShmDispatch (ClientPtr client)
+{
+    REQUEST(xReq);
+    switch (stuff->data)
+    {
+    case X_ShmQueryVersion:
+	return SProcShmQueryVersion(client);
+    case X_ShmAttach:
+	return SProcShmAttach(client);
+    case X_ShmDetach:
+	return SProcShmDetach(client);
+    case X_ShmPutImage:
+	return SProcShmPutImage(client);
+    case X_ShmGetImage:
+	return SProcShmGetImage(client);
+    case X_ShmCreatePixmap:
+	return SProcShmCreatePixmap(client);
+    default:
+	return BadRequest;
+    }
+}
+
+void
+ShmExtensionInit(INITARGS)
+{
+    ExtensionEntry *extEntry;
+    int i;
+
+#ifdef MUST_CHECK_FOR_SHM_SYSCALL
+    if (!CheckForShmSyscall())
+    {
+	ErrorF("MIT-SHM extension disabled due to lack of kernel support\n");
+	return;
+    }
+#endif
+
+    if (!ShmRegisterPrivates())
+	return;
+
+    sharedPixmaps = xFalse;
+    {
+      sharedPixmaps = xTrue;
+      for (i = 0; i < screenInfo.numScreens; i++)
+      {
+	ShmScrPrivateRec *screen_priv = ShmInitScreenPriv(screenInfo.screens[i]);
+	if (!screen_priv->shmFuncs)
+	    screen_priv->shmFuncs = &miFuncs;
+	if (!screen_priv->shmFuncs->CreatePixmap)
+	    sharedPixmaps = xFalse;
+      }
+      if (sharedPixmaps)
+	for (i = 0; i < screenInfo.numScreens; i++)
+	{
+	    ShmScrPrivateRec *screen_priv = ShmGetScreenPriv(screenInfo.screens[i]);
+	    screen_priv->destroyPixmap = screenInfo.screens[i]->DestroyPixmap;
+	    screenInfo.screens[i]->DestroyPixmap = ShmDestroyPixmap;
+	}
+    }
+    ShmSegType = CreateNewResourceType(ShmDetachSegment, "ShmSeg");
+    if (ShmSegType &&
+	(extEntry = AddExtension(SHMNAME, ShmNumberEvents, ShmNumberErrors,
+				 ProcShmDispatch, SProcShmDispatch,
+				 ShmResetProc, StandardMinorOpcode)))
+    {
+	ShmReqCode = (unsigned char)extEntry->base;
+	ShmCompletionCode = extEntry->eventBase;
+	BadShmSegCode = extEntry->errorBase;
+	SetResourceTypeErrorValue(ShmSegType, BadShmSegCode);
+	EventSwapVector[ShmCompletionCode] = (EventSwapPtr) SShmCompletionEvent;
+    }
+}