Go to file
Matthieu Herrb 03ff880e8b Fix CVE-2011-4029: File permission change vulnerability.
Use fchmod() to change permissions of the lock file instead
of chmod(), thus avoid the race that can be exploited to set
a symbolic link to any file or directory in the system.

Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
(cherry picked from commit b67581cf82)
(cherry picked from commit 12f65819ff)
2011-10-21 20:43:22 +02:00
Xext Add and use SERVER_SYNC_*_VERSION 2011-01-02 13:09:36 +01:00
Xi Xi: move property reset from extension shutdown to init. 2010-11-14 00:35:06 +01:00
composite Update Sun license notices to current X.Org standard form 2009-12-18 17:12:00 -08:00
config config: don't shutdown the libhal ctx if it failed to initialize (#23213) 2009-08-14 11:01:20 +10:00
damageext input: define server-supported protocol versions in one single file. 2009-09-21 21:47:35 +10:00
dbe dbe: Fix indentation 2009-07-17 14:57:50 -04:00
dix Change keyboard controls on slave keyboards (#27926) 2010-11-11 13:14:58 +01:00
doc Xserver(1) man page updates 2010-08-21 14:10:01 -07:00
exa EXA: Fix crash with fill using 1x1 tile of depth < 8 (bug #24703). 2011-01-10 15:16:45 +01:00
fb fb: make isClipped always reject negative coordinates (bug 11503) 2010-08-21 20:41:37 +01:00
glx glx: Work around wrong request lengths sent by mesa 2011-10-21 20:37:51 +02:00
hw XQuartz GL: Add $(GL_CFLAGS) to CFLAGS 2011-03-13 15:10:00 -07:00
include Add and use SERVER_SYNC_*_VERSION 2011-01-02 13:09:36 +01:00
m4 dolt: add Cygwin to supported platforms 2009-10-19 11:18:58 +10:00
mi mi: handle DGA subtypes when determining the master device. 2011-01-12 10:17:46 +01:00
miext rootless: Remove an unneeded comment 2010-05-02 20:05:23 -07:00
os Fix CVE-2011-4029: File permission change vulnerability. 2011-10-21 20:43:22 +02:00
randr Revert "randr: check for virtual size limits before set crtc" 2011-01-31 14:14:47 +01:00
record Re-enable RECORD extension. 2010-02-23 10:51:13 +10:00
render render: Fix byteswapping of gradient stops 2010-12-03 11:32:12 +01:00
test dix: EventToCore needs to copy the root window too. 2010-04-07 13:39:43 +10:00
xfixes Update Sun license notices to current X.Org standard form 2009-12-18 17:12:00 -08:00
xkb xkb: Fix omissions in geometry initialization #27679 2010-11-11 13:19:23 +01:00
.gitignore Add (ok, fix) support for DTrace under OS X 2009-09-27 23:34:28 -07:00
COPYING Update Sun license notices to current X.Org standard form 2009-12-18 17:12:00 -08:00
Makefile.am Fix 'distcheck' to use host xkb files but install to build dir 2009-10-22 07:53:35 +10:00
autogen.sh autogen.sh: Pass --force to autoreconf 2008-07-22 16:55:26 +03:00
configure.ac xserver 1.7.7 2010-05-04 11:12:44 +10:00
cpprules.in Update xorg.conf man page & sample for changes in Xorg 1.7 2009-09-14 16:03:18 +10:00
shave-libtool.in shave: use CC tag variable on libtool 2009-09-13 16:43:42 +10:00
shave.in shave: hack around the configure ld check for make distcheck. 2009-09-04 16:41:47 +10:00
xorg-server.m4 macros: use PKG_CONFIG variable rather than executable name 2010-01-19 17:35:55 +13:00
xorg-server.pc.in Since font modules are dead, don't mention them in xorg-server.pc 2009-07-09 17:21:07 -04:00