xserver/hw
Martin Weber 7ae221ad57 hw/xfree86: Avoid cursor use after free
During a VT-Switch a raw pointer to the shared cursor object
is saved which is then freed (in case of low refcount) by a call to
xf86CursorSetCursor with argument pCurs = NullCursor.
This leads to a dangling pointer which can follow in a use after free.

This fix ensures that there is a shared handle saved for the VT-Switch cycle.

Reviewed-by: Michel Dänzer <mdaenzer@redhat.com>
2020-06-24 08:02:59 +00:00
..
dmx Update URL's in man pages 2020-05-10 17:46:33 -07:00
kdrive Xephyr: Cast "red" to char* for xcb_aux_parse_color 2020-01-28 20:35:06 +00:00
vfb Revert https://gitlab.freedesktop.org/xorg/xserver/merge_requests/235 2019-10-14 12:48:24 +02:00
xfree86 hw/xfree86: Avoid cursor use after free 2020-06-24 08:02:59 +00:00
xnest Fix build with gcc 9.3.0's -Werror=alloc-size-larger-than= 2020-05-01 20:02:29 +00:00
xquartz Update URL's in man pages 2020-05-10 17:46:33 -07:00
xwayland xwayland: allow using linux-dmabuf with DRM_FORMAT_MOD_INVALID 2020-06-19 10:10:47 +00:00
xwin hw/xwin: Drop call to setlocale() 2020-04-15 14:13:58 +00:00
Makefile.am Xwayland DDX 2014-04-03 15:19:22 -07:00
meson.build meson: Move Xvfb build under an option. 2017-09-20 13:19:21 -04:00