Received: by mail.netbsd.org (Postfix, from userid 605) id 3A57A14A1AD; Tue, 9 Dec 2014 19:26:22 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 1DC3D14A162 for ; Tue, 9 Dec 2014 19:26:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at NetBSD.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 441DSWzicH2I for ; Tue, 9 Dec 2014 19:26:19 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id CDFD414A139 for ; Tue, 9 Dec 2014 19:26:19 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id C796698; Tue, 9 Dec 2014 19:26:19 +0000 (UTC) Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" MIME-Version: 1.0 Date: Tue, 9 Dec 2014 19:26:19 +0000 From: "matthew green" Subject: CVS commit: xsrc/external/mit/xorg-server/dist To: source-changes@NetBSD.org X-Mailer: log_accum Message-Id: <20141209192619.C796698@cvs.netbsd.org> Sender: source-changes-owner@NetBSD.org List-Id: source-changes.NetBSD.org Precedence: bulk Reply-To: source-changes-d@NetBSD.org Mail-Reply-To: "matthew green" Mail-Followup-To: source-changes-d@NetBSD.org Module Name: xsrc Committed By: mrg Date: Tue Dec 9 19:26:19 UTC 2014 Modified Files: xsrc/external/mit/xorg-server/dist: configure configure.ac xsrc/external/mit/xorg-server/dist/Xext: xcmisc.c xvdisp.c xsrc/external/mit/xorg-server/dist/Xi: chgdctl.c chgfctl.c sendexev.c xiallowev.c xichangecursor.c xichangehierarchy.c xigetclientpointer.c xigrabdev.c xipassivegrab.c xiproperty.c xiquerydevice.c xiquerypointer.c xiselectev.c xisetclientpointer.c xisetdevfocus.c xiwarppointer.c xsrc/external/mit/xorg-server/dist/dbe: dbe.c xsrc/external/mit/xorg-server/dist/dix: dispatch.c region.c xsrc/external/mit/xorg-server/dist/glx: glxcmds.c glxcmdsswap.c glxserver.h indirect_program.c indirect_reqsize.c indirect_reqsize.h indirect_texture_compression.c indirect_util.c rensize.c single2.c single2swap.c singlepix.c singlepixswap.c swap_interval.c unpack.h xsrc/external/mit/xorg-server/dist/hw/xfree86/dri2: dri2ext.c xsrc/external/mit/xorg-server/dist/include: dix.h regionstr.h xsrc/external/mit/xorg-server/dist/os: access.c rpcauth.c xsrc/external/mit/xorg-server/dist/randr: rrsdispatch.c xsrc/external/mit/xorg-server/dist/render: render.c xsrc/external/mit/xorg-server/dist/test: Makefile.am xsrc/external/mit/xorg-server/dist/test/xi2: protocol-xigetclientpointer.c protocol-xiquerypointer.c protocol-xiwarppointer.c xsrc/external/mit/xorg-server/dist/xfixes: select.c Added Files: xsrc/external/mit/xorg-server/dist/test/xi1: Makefile.am protocol-xchangedevicecontrol.c Log Message: apply fixes for: X.Org Security Advisory: Dec. 9, 2014 Protocol handling issues in X Window System servers backported to 1.10.x by myself. included are fixes for: denial of service due to unchecked malloc in client authentication CVE-2014-8091 integer overflows calculating memory needs for requests CVE-2014-8092 CVE-2014-8093 CVE-2014-8094 out of bounds access due to not validating length or offset values in requests CVE-2014-8095 CVE-2014-8096 CVE-2014-8097 CVE-2014-8098 CVE-2014-8099 CVE-2014-8100 CVE-2014-8101 CVE-2014-8102 CVE-2014-8103 To generate a diff of this commit: cvs rdiff -u -r1.1.1.9 -r1.2 xsrc/external/mit/xorg-server/dist/configure \ xsrc/external/mit/xorg-server/dist/configure.ac cvs rdiff -u -r1.1.1.4 -r1.2 xsrc/external/mit/xorg-server/dist/Xext/xcmisc.c cvs rdiff -u -r1.4 -r1.5 xsrc/external/mit/xorg-server/dist/Xext/xvdisp.c cvs rdiff -u -r1.1.1.3 -r1.2 xsrc/external/mit/xorg-server/dist/Xi/chgdctl.c \ xsrc/external/mit/xorg-server/dist/Xi/chgfctl.c \ xsrc/external/mit/xorg-server/dist/Xi/sendexev.c \ xsrc/external/mit/xorg-server/dist/Xi/xichangehierarchy.c \ xsrc/external/mit/xorg-server/dist/Xi/xipassivegrab.c cvs rdiff -u -r1.1.1.1 -r1.2 \ xsrc/external/mit/xorg-server/dist/Xi/xiallowev.c \ xsrc/external/mit/xorg-server/dist/Xi/xichangecursor.c \ xsrc/external/mit/xorg-server/dist/Xi/xigetclientpointer.c \ xsrc/external/mit/xorg-server/dist/Xi/xisetclientpointer.c \ xsrc/external/mit/xorg-server/dist/Xi/xisetdevfocus.c cvs rdiff -u -r1.1.1.2 -r1.2 \ xsrc/external/mit/xorg-server/dist/Xi/xigrabdev.c \ xsrc/external/mit/xorg-server/dist/Xi/xiquerydevice.c \ xsrc/external/mit/xorg-server/dist/Xi/xiquerypointer.c \ xsrc/external/mit/xorg-server/dist/Xi/xiselectev.c \ xsrc/external/mit/xorg-server/dist/Xi/xiwarppointer.c cvs rdiff -u -r1.1.1.4 -r1.2 \ xsrc/external/mit/xorg-server/dist/Xi/xiproperty.c cvs rdiff -u -r1.1.1.4 -r1.2 xsrc/external/mit/xorg-server/dist/dbe/dbe.c cvs rdiff -u -r1.1.1.7 -r1.2 \ xsrc/external/mit/xorg-server/dist/dix/dispatch.c cvs rdiff -u -r1.1.1.1 -r1.2 xsrc/external/mit/xorg-server/dist/dix/region.c cvs rdiff -u -r1.6 -r1.7 xsrc/external/mit/xorg-server/dist/glx/glxcmds.c cvs rdiff -u -r1.1.1.3 -r1.2 \ xsrc/external/mit/xorg-server/dist/glx/glxcmdsswap.c \ xsrc/external/mit/xorg-server/dist/glx/glxserver.h \ xsrc/external/mit/xorg-server/dist/glx/single2.c \ xsrc/external/mit/xorg-server/dist/glx/unpack.h cvs rdiff -u -r1.1.1.2 -r1.2 \ xsrc/external/mit/xorg-server/dist/glx/indirect_program.c \ xsrc/external/mit/xorg-server/dist/glx/indirect_reqsize.c \ xsrc/external/mit/xorg-server/dist/glx/indirect_reqsize.h \ xsrc/external/mit/xorg-server/dist/glx/indirect_texture_compression.c \ xsrc/external/mit/xorg-server/dist/glx/indirect_util.c \ xsrc/external/mit/xorg-server/dist/glx/rensize.c \ xsrc/external/mit/xorg-server/dist/glx/single2swap.c \ xsrc/external/mit/xorg-server/dist/glx/singlepix.c \ xsrc/external/mit/xorg-server/dist/glx/singlepixswap.c \ xsrc/external/mit/xorg-server/dist/glx/swap_interval.c cvs rdiff -u -r1.1.1.4 -r1.2 \ xsrc/external/mit/xorg-server/dist/hw/xfree86/dri2/dri2ext.c cvs rdiff -u -r1.1.1.5 -r1.2 xsrc/external/mit/xorg-server/dist/include/dix.h cvs rdiff -u -r1.1.1.3 -r1.2 \ xsrc/external/mit/xorg-server/dist/include/regionstr.h cvs rdiff -u -r1.1.1.5 -r1.2 xsrc/external/mit/xorg-server/dist/os/access.c cvs rdiff -u -r1.1.1.3 -r1.2 xsrc/external/mit/xorg-server/dist/os/rpcauth.c cvs rdiff -u -r1.1.1.3 -r1.2 \ xsrc/external/mit/xorg-server/dist/randr/rrsdispatch.c cvs rdiff -u -r1.1.1.7 -r1.2 \ xsrc/external/mit/xorg-server/dist/render/render.c cvs rdiff -u -r1.1.1.1 -r1.2 \ xsrc/external/mit/xorg-server/dist/test/Makefile.am cvs rdiff -u -r0 -r1.1 \ xsrc/external/mit/xorg-server/dist/test/xi1/Makefile.am \ xsrc/external/mit/xorg-server/dist/test/xi1/protocol-xchangedevicecontrol.c cvs rdiff -u -r1.1.1.1 -r1.2 \ xsrc/external/mit/xorg-server/dist/test/xi2/protocol-xigetclientpointer.c \ xsrc/external/mit/xorg-server/dist/test/xi2/protocol-xiquerypointer.c \ xsrc/external/mit/xorg-server/dist/test/xi2/protocol-xiwarppointer.c cvs rdiff -u -r1.1.1.3 -r1.2 \ xsrc/external/mit/xorg-server/dist/xfixes/select.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.