frederik
/
xserver
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
xserver/include
History
Alan Coopersmith 73c63afb93 Xi: unvalidated lengths in Xinput extension [CVE-2014-8095] 
Multiple functions in the Xinput extension handling of requests from
clients failed to check that the length of the request sent by the
client was large enough to perform all the required operations and
thus could read or write to memory outside the bounds of the request
buffer.

This commit includes the creation of a new REQUEST_AT_LEAST_EXTRA_SIZE
macro in include/dix.h for the common case of needing to ensure a
request is large enough to include both the request itself and a
minimum amount of extra data following the request header.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
 		2014-12-08 18:09:48 -08:00
..
.gitignore .gitignore: use common defaults with custom section #24239 2009-11-11 21:40:20 -08:00
Makefile.am systemd-logind: Add systemd-logind "core" 2014-03-03 08:13:55 +01:00
XIstubs.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
Xprintf.h os/xprintf: add Xvscnprintf and Xscnprintf 2012-05-03 14:59:23 +10:00
busfault.h Trap SIGBUS to handle truncated shared memory segments 2013-11-11 15:16:07 -08:00
callback.h Avoid starting a comment with */* 2014-07-17 10:19:52 -07:00
client.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
closestr.h Replace 'pointer' type with 'void *' 2014-01-12 10:24:11 -08:00
closure.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
colormap.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
colormapst.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
cursor.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
cursorstr.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
dbus-core.h xfree86: drop double-typedef of DBusConnection 2014-11-12 10:25:00 +10:00
dix-config-apple-verbatim.h Move the apple fat binary hacks back to a header file, and make it apple-only. 2009-01-30 16:36:45 -08:00
dix-config.h.in Use unique display name for each xi2 test program [v3] 2014-10-09 14:15:45 +02:00
dix.h Xi: unvalidated lengths in Xinput extension [CVE-2014-8095] 2014-12-08 18:09:48 -08:00
dixaccess.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
dixevents.h dix: Remove redundant declarations. 2012-05-14 13:31:00 +01:00
dixfont.h Avoid starting a comment with */* 2014-07-17 10:19:52 -07:00
dixfontstr.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
dixfontstubs.h include: GetClientResolutions is declared in font.h 2014-01-22 19:56:31 -08:00
dixgrabs.h Avoid starting a comment with */* 2014-07-17 10:19:52 -07:00
dixstruct.h dix: Praise clients which haven't run for a while, rather than idle clients 2014-01-23 10:10:28 -08:00
eventconvert.h input: drop FP1616 macro 2012-11-19 12:12:23 +10:00
events.h Add support for XI2.3: Pointer barrier events and releases. 2012-12-17 15:01:45 +10:00
eventstr.h Delete stray ; in struct _DeviceChangedEvent 2014-02-09 17:21:20 -08:00
exevents.h dix: Move DeviceFocusEvent from Xi into enterleave.c 2012-05-17 08:50:44 +10:00
extension.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
extinit.h present: Add Present extension 2013-10-31 16:59:18 -07:00
extnsionst.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
gc.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
gcstruct.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
globals.h Clean up warnings in DIX 2014-01-12 10:14:49 -08:00
glx_extinit.h glx: drop GLX_LIBS from X server and workaround sdksyms. 2012-07-25 23:30:53 -07:00
hotplug.h config: Replace OdevAttributes linked list with struct 2014-07-17 17:10:48 -07:00
input.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
inputstr.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
inpututils.h dix: split xi2_mask_isset into a per-device function 2012-12-12 17:25:16 +10:00
kdrive-config.h.in kdrive: Add option to compile out input drivers 2010-01-06 19:47:53 +06:00
list.h include: fix documentation for list.h 2014-11-12 10:24:55 +10:00
misc.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
miscstruct.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
opaque.h Add a command line argument for disabling indirect GLX. 2014-04-23 13:24:22 -07:00
optionstr.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
os.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
pixmap.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
pixmapstr.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
privates.h Replace 'pointer' type with 'void *' 2014-01-12 10:24:11 -08:00
property.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
propertyst.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
protocol-versions.h present: Don't use the major/minor version from the protocol headers 2013-12-13 14:59:04 -05:00
ptrveloc.h dix: indentation fixes for pointer acceleration 2012-05-16 10:59:35 +10:00
region.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
regionstr.h dix: integer overflow in RegionSizeof() [CVE-2014-8092 3/4] 2014-12-08 18:09:47 -08:00
registry.h XSERVER_DTRACE needs request names from registry too 2014-09-22 12:00:46 -07:00
resource.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
rgb.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
screenint.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
scrnintstr.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
selection.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
servermd.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
site.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
swaprep.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
swapreq.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
systemd-logind.h systemd-logind: let the logind code decided whether to close an fd 2014-05-05 07:26:33 +10:00
validate.h Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
version-config.h.in Move VENDOR_* defines from AC_SUBST to a header to avoid angering shave. 2009-04-14 10:35:44 -04:00
window.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
windowstr.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
xkb-config.h.in Move to autoconf standard function name checks & defines 2011-12-05 14:32:45 -08:00
xkbfile.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
xkbrules.h xkb: add a call to init an XkbRMLVOSet from const chars 2014-02-04 10:53:59 +10:00
xkbsrv.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
xkbstr.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
xorg-config.h.in xfree86: Remove the memory of MTRR awareness 2014-09-16 11:58:53 -04:00
xorg-server.h.in Add X_BYTE_ORDER to xorg-server.h 2014-07-31 21:42:04 -07:00
xserver-properties.h Add missing labels for multitouch valuators 2012-10-30 15:11:10 +10:00
xsha1.h Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
xwin-config.h.in configure: Restore DEFAULT_LOGDIR to xwin-config.h, it is used 2014-06-02 13:07:46 +01:00