xserver/hw
Olivier Fourdan 0235121c6a xfree86: Check for RandR provider functions
Changing XRandR provider properties if the driver has set no provider
function such as the modesetting driver will cause a NULL pointer
dereference and a crash of the Xorg server.

Related to CVE-2025-49180

This issue was discovered by Nils Emmerich <nemmerich@ernw.de> and
reported by Julian Suleder via ERNW Vulnerability Disclosure.

Signed-off-by: Olivier Fourdan <ofourdan@redhat.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2024>
2025-06-17 14:21:24 +02:00
..
kdrive Xephyr.man: Use \- to get ASCII hyphens instead of Unicode dashes 2025-05-31 15:15:13 -07:00
vfb man pages: remove extraneous PP macros 2025-05-31 15:01:49 -07:00
xfree86 xfree86: Check for RandR provider functions 2025-06-17 14:21:24 +02:00
xnest Xnest: use authorative declarations from X11/XKBlib.h 2025-02-28 17:27:05 +00:00
xquartz man pages: remove extraneous PP macros 2025-05-31 15:01:49 -07:00
xwayland Revert "os: move BUG_*() macros to own private header" 2025-06-13 17:13:54 -07:00
xwin XWin.man: fix typos in font change escapes 2025-05-31 15:06:23 -07:00
meson.build meson.build: print a summary of the DDX to build 2025-03-24 03:05:35 +00:00