Module Name: xsrc Committed By: snj Date: Tue Dec 9 19:44:42 UTC 2014
Modified Files: xsrc/external/mit/xorg-server/dist [netbsd-6-0]: configure configure.ac xsrc/external/mit/xorg-server/dist/Xext [netbsd-6-0]: xcmisc.c xvdisp.c xsrc/external/mit/xorg-server/dist/Xi [netbsd-6-0]: chgdctl.c chgfctl.c sendexev.c xiallowev.c xichangecursor.c xichangehierarchy.c xigetclientpointer.c xigrabdev.c xipassivegrab.c xiproperty.c xiquerydevice.c xiquerypointer.c xiselectev.c xisetclientpointer.c xisetdevfocus.c xiwarppointer.c xsrc/external/mit/xorg-server/dist/dbe [netbsd-6-0]: dbe.c xsrc/external/mit/xorg-server/dist/dix [netbsd-6-0]: dispatch.c region.c xsrc/external/mit/xorg-server/dist/glx [netbsd-6-0]: glxcmds.c glxcmdsswap.c glxserver.h indirect_program.c indirect_reqsize.c indirect_reqsize.h indirect_texture_compression.c indirect_util.c rensize.c single2.c single2swap.c singlepix.c singlepixswap.c swap_interval.c unpack.h xsrc/external/mit/xorg-server/dist/hw/xfree86/dri2 [netbsd-6-0]: dri2ext.c xsrc/external/mit/xorg-server/dist/include [netbsd-6-0]: dix.h regionstr.h xsrc/external/mit/xorg-server/dist/os [netbsd-6-0]: access.c rpcauth.c xsrc/external/mit/xorg-server/dist/randr [netbsd-6-0]: rrsdispatch.c xsrc/external/mit/xorg-server/dist/render [netbsd-6-0]: render.c xsrc/external/mit/xorg-server/dist/test [netbsd-6-0]: Makefile.am xsrc/external/mit/xorg-server/dist/test/xi2 [netbsd-6-0]: protocol-xigetclientpointer.c protocol-xiquerypointer.c protocol-xiwarppointer.c xsrc/external/mit/xorg-server/dist/xfixes [netbsd-6-0]: select.c Added Files: xsrc/external/mit/xorg-server/dist/test/xi1 [netbsd-6-0]: Makefile.am protocol-xchangedevicecontrol.c Log Message: Apply patch (requested by mrg in ticket #1208): apply fixes for X.Org Security Advisory: Dec. 9, 2014 Protocol handling issues in X Window System servers included are fixes for: denial of service due to unchecked malloc in client authentication CVE-2014-8091 integer overflows calculating memory needs for requests CVE-2014-8092 CVE-2014-8093 CVE-2014-8094 out of bounds access due to not validating length or offset values in requests CVE-2014-8095 CVE-2014-8096 CVE-2014-8097 CVE-2014-8098 CVE-2014-8099 CVE-2014-8100 CVE-2014-8101 CVE-2014-8102 CVE-2014-8103 To generate a diff of this commit: cvs rdiff -u -r1.1.1.8 -r1.1.1.8.4.1 \ xsrc/external/mit/xorg-server/dist/configure \ xsrc/external/mit/xorg-server/dist/configure.ac cvs rdiff -u -r1.1.1.4 -r1.1.1.4.4.1 \ xsrc/external/mit/xorg-server/dist/Xext/xcmisc.c cvs rdiff -u -r1.3 -r1.3.4.1 xsrc/external/mit/xorg-server/dist/Xext/xvdisp.c cvs rdiff -u -r1.1.1.3 -r1.1.1.3.4.1 \ xsrc/external/mit/xorg-server/dist/Xi/chgdctl.c \ xsrc/external/mit/xorg-server/dist/Xi/chgfctl.c \ xsrc/external/mit/xorg-server/dist/Xi/sendexev.c cvs rdiff -u -r1.1.1.1 -r1.1.1.1.4.1 \ xsrc/external/mit/xorg-server/dist/Xi/xiallowev.c \ xsrc/external/mit/xorg-server/dist/Xi/xichangecursor.c \ xsrc/external/mit/xorg-server/dist/Xi/xigetclientpointer.c \ xsrc/external/mit/xorg-server/dist/Xi/xisetclientpointer.c \ xsrc/external/mit/xorg-server/dist/Xi/xisetdevfocus.c cvs rdiff -u -r1.1.1.2 -r1.1.1.2.4.1 \ xsrc/external/mit/xorg-server/dist/Xi/xichangehierarchy.c \ xsrc/external/mit/xorg-server/dist/Xi/xigrabdev.c \ xsrc/external/mit/xorg-server/dist/Xi/xipassivegrab.c \ xsrc/external/mit/xorg-server/dist/Xi/xiquerydevice.c \ xsrc/external/mit/xorg-server/dist/Xi/xiquerypointer.c \ xsrc/external/mit/xorg-server/dist/Xi/xiselectev.c \ xsrc/external/mit/xorg-server/dist/Xi/xiwarppointer.c cvs rdiff -u -r1.1.1.4 -r1.1.1.4.4.1 \ xsrc/external/mit/xorg-server/dist/Xi/xiproperty.c cvs rdiff -u -r1.1.1.4 -r1.1.1.4.4.1 \ xsrc/external/mit/xorg-server/dist/dbe/dbe.c cvs rdiff -u -r1.1.1.6 -r1.1.1.6.4.1 \ xsrc/external/mit/xorg-server/dist/dix/dispatch.c cvs rdiff -u -r1.1.1.1 -r1.1.1.1.4.1 \ xsrc/external/mit/xorg-server/dist/dix/region.c cvs rdiff -u -r1.6 -r1.6.4.1 xsrc/external/mit/xorg-server/dist/glx/glxcmds.c cvs rdiff -u -r1.1.1.3 -r1.1.1.3.4.1 \ xsrc/external/mit/xorg-server/dist/glx/glxcmdsswap.c \ xsrc/external/mit/xorg-server/dist/glx/glxserver.h \ xsrc/external/mit/xorg-server/dist/glx/single2.c \ xsrc/external/mit/xorg-server/dist/glx/unpack.h cvs rdiff -u -r1.1.1.2 -r1.1.1.2.4.1 \ xsrc/external/mit/xorg-server/dist/glx/indirect_program.c \ xsrc/external/mit/xorg-server/dist/glx/indirect_reqsize.c \ xsrc/external/mit/xorg-server/dist/glx/indirect_reqsize.h \ xsrc/external/mit/xorg-server/dist/glx/indirect_texture_compression.c \ xsrc/external/mit/xorg-server/dist/glx/indirect_util.c \ xsrc/external/mit/xorg-server/dist/glx/rensize.c \ xsrc/external/mit/xorg-server/dist/glx/single2swap.c \ xsrc/external/mit/xorg-server/dist/glx/singlepix.c \ xsrc/external/mit/xorg-server/dist/glx/singlepixswap.c \ xsrc/external/mit/xorg-server/dist/glx/swap_interval.c cvs rdiff -u -r1.1.1.3 -r1.1.1.3.4.1 \ xsrc/external/mit/xorg-server/dist/hw/xfree86/dri2/dri2ext.c cvs rdiff -u -r1.1.1.5 -r1.1.1.5.4.1 \ xsrc/external/mit/xorg-server/dist/include/dix.h cvs rdiff -u -r1.1.1.3 -r1.1.1.3.4.1 \ xsrc/external/mit/xorg-server/dist/include/regionstr.h cvs rdiff -u -r1.1.1.5 -r1.1.1.5.4.1 \ xsrc/external/mit/xorg-server/dist/os/access.c cvs rdiff -u -r1.1.1.3 -r1.1.1.3.4.1 \ xsrc/external/mit/xorg-server/dist/os/rpcauth.c cvs rdiff -u -r1.1.1.3 -r1.1.1.3.4.1 \ xsrc/external/mit/xorg-server/dist/randr/rrsdispatch.c cvs rdiff -u -r1.1.1.7 -r1.1.1.7.4.1 \ xsrc/external/mit/xorg-server/dist/render/render.c cvs rdiff -u -r1.1.1.1 -r1.1.1.1.4.1 \ xsrc/external/mit/xorg-server/dist/test/Makefile.am cvs rdiff -u -r0 -r1.1.6.2 \ xsrc/external/mit/xorg-server/dist/test/xi1/Makefile.am \ xsrc/external/mit/xorg-server/dist/test/xi1/protocol-xchangedevicecontrol.c cvs rdiff -u -r1.1.1.1 -r1.1.1.1.4.1 \ xsrc/external/mit/xorg-server/dist/test/xi2/protocol-xigetclientpointer.c \ xsrc/external/mit/xorg-server/dist/test/xi2/protocol-xiquerypointer.c \ xsrc/external/mit/xorg-server/dist/test/xi2/protocol-xiwarppointer.c cvs rdiff -u -r1.1.1.3 -r1.1.1.3.4.1 \ xsrc/external/mit/xorg-server/dist/xfixes/select.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.