~thopiekar/xorg-server/+git/xorg-xserver-displaylink.Spintzyk:server-1.9-branch

Last commit made on 2011-10-29
Get this branch:
git clone -b server-1.9-branch https://git.launchpad.net/~thopiekar/xorg-server/+git/xorg-xserver-displaylink.Spintzyk

Branch merges

Branch information

Recent commits

e9ffc3a... by Matthieu Herrb

Fix CVE-2011-4029: File permission change vulnerability.

Use fchmod() to change permissions of the lock file instead
of chmod(), thus avoid the race that can be exploited to set
a symbolic link to any file or directory in the system.

Signed-off-by: Matthieu Herrb <email address hidden>
Reviewed-by: Alan Coopersmith <email address hidden>
(cherry picked from commit b67581cf825940fdf52bf2e0af4330e695d724a4)

1fec281... by Matthieu Herrb

Fix CVE-2011-4028: File disclosure vulnerability.

use O_NOFOLLOW to open the existing lock file, so symbolic links
aren't followed, thus avoid revealing if it point to an existing
file.

Signed-off-by: Matthieu Herrb <email address hidden>
Reviewed-by: Alan Coopersmith <email address hidden>
(cherry picked from commit 6ba44b91e37622ef8c146d8f2ac92d708a18ed34)

99520dd... by Julien Cristau

glx: Work around wrong request lengths sent by mesa

mesa used to send too long requests for GLXDestroyPixmap,
GLXDestroyWindow, GLXChangeDrawableAttributes, GLXGetDrawableAttributes
and GLXGetFBConfigsSGIX.

Fixes a regression introduced in ec9c97c6bf70b523bc500bd3adf62176f1bb33a4
X.Org bug#33324 <https://bugs.freedesktop.org/show_bug.cgi?id=33324>

Reported-by: <email address hidden>
Signed-off-by: Julien Cristau <email address hidden>
Reviewed-by: Adam Jackson <email address hidden>
(cherry picked from commit 402b329c3aa8ddbebaa1f593306a02d4cd6fed26)

d6831f5... by Julien Cristau

glx: fix BindTexImageEXT length check

The request is followed by a list of attributes.

X.Org bug#33449

Reported-and-tested-by: meng <email address hidden>
Signed-off-by: Julien Cristau <email address hidden>
Reviewed-by: Adam Jackson <email address hidden>
(cherry picked from commit 1137c11be0f82049d28024eaf963c6f76e0d4334)

5f3e015... by Julien Cristau

glx: fix request length check for CreateGLXPbufferSGIX

The request is followed by an attribute list.

Signed-off-by: Julien Cristau <email address hidden>
Reviewed-by: Adam Jackson <email address hidden>
(cherry picked from commit a883cf1545abd89bb2cadfa659718884b56fd234)

d22de25... by Julien Cristau

glx: validate numAttribs field before using it

Reviewed-by: Kristian Høgsberg <email address hidden>
Reviewed-by: Daniel Stone <email address hidden>
Signed-off-by: Julien Cristau <email address hidden>
(cherry picked from commit d9225b9602c85603ae616a7381c784f5cf5e811c)

83f5fab... by Julien Cristau

glx: swap the request arrays entirely, not just half of them

Various glx requests include a list of pairs of attributes. We were
only swapping the first half.

Reviewed-by: Kristian Høgsberg <email address hidden>
Reviewed-by: Daniel Stone <email address hidden>
Signed-off-by: Julien Cristau <email address hidden>
(cherry picked from commit 62319e8381ebd645ae36b25e5fc3c0e9b098387b)

4ecf6e2... by Julien Cristau

glx: check request length before swapping

Reviewed-by: Kristian Høgsberg <email address hidden>
Reviewed-by: Daniel Stone <email address hidden>
Signed-off-by: Julien Cristau <email address hidden>
(cherry picked from commit 6c69235a9dfc52e4b4e47630ff4bab1a820eb543)

6255419... by Julien Cristau

glx: validate request lengths

Reviewed-by: Adam Jackson <email address hidden>
Reviewed-by: Kristian Høgsberg <email address hidden>
Reviewed-by: Daniel Stone <email address hidden>
Signed-off-by: Julien Cristau <email address hidden>
(cherry picked from commit ec9c97c6bf70b523bc500bd3adf62176f1bb33a4)

9095585... by Tiago Vignatti <email address hidden>

xfree86: loader: fix memory leaks in LoaderListDirs

Signed-off-by: Tiago Vignatti <email address hidden>
Reviewed-by: Peter Hutterer <email address hidden>
Reviewed-by: Nicolas Peninguy <email address hidden>