Go to file
Matthieu Herrb 2902b78535 Fix XRecordRegisterClients() Integer underflow
CVE-2020-14362 ZDI-CAN-11574

This vulnerability was discovered by:
Jan-Niklas Sohn working with Trend Micro Zero Day Initiative

Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>
2020-08-25 17:01:29 +02:00
.gitlab-ci gitlab-ci: Install libnvidia-egl-wayland-dev package 2020-01-06 15:52:33 +01:00
Xext Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
Xi Fix XIChangeHierarchy() integer underflow 2020-08-25 17:01:29 +02:00
composite Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
config linux: Fix platform device probe for DT-based PCI 2020-07-28 16:14:55 +08:00
damageext Use ARRAY_SIZE all over the tree 2017-10-30 13:45:20 -04:00
dbe Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
dix fix for ZDI-11426 2020-07-31 14:51:23 +00:00
doc doc: Update URLs in Xserver-DTrace.xml 2020-07-05 13:18:45 -07:00
dri3 dri3: Fix XACE access mode for open and get_supported_modifiers 2019-01-16 20:05:43 +00:00
exa exa: rename some badly named variables 2020-07-10 06:17:40 +10:00
fb xserver/output: rename some badly named variables/APIs. 2020-07-10 06:17:44 +10:00
glamor glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling 2020-08-24 17:39:34 +02:00
glx Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
hw xwayland: Disable the MIT-SCREEN-SAVER extension when rootless 2020-08-04 09:33:15 +02:00
include xserver/output: rename some badly named variables/APIs. 2020-07-10 06:17:44 +10:00
m4 Add ax_pthread.m4 to m4/ 2016-05-29 19:20:51 -07:00
man dix: Remove -to option to set the default connection timeout 2019-10-30 16:17:04 +00:00
mi Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
miext Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
os Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
present present/wnmd: Execute copies at target_msc-1 already 2020-08-25 12:22:35 +02:00
pseudoramiX Unvalidated lengths 2017-10-10 23:33:34 +02:00
randr randr: Check rrPrivKey in RRHasScanoutPixmap() 2020-07-21 15:53:53 +00:00
record Fix XRecordRegisterClients() Integer underflow 2020-08-25 17:01:29 +02:00
render dix: Call SourceValidate before GetImage 2019-10-30 16:26:01 +00:00
test test: Fix struct initialization warning 2020-05-08 16:45:50 +02:00
xfixes Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
xkb Fix XkbSelectEvents() integer underflow 2020-08-25 17:01:29 +02:00
.appveyor.yml hw/xwin: Remove XSetAuthorization() for helper clients 2020-04-15 14:13:58 +00:00
.dir-locals.el .dir-locals.el: Add missing final newline 2019-10-01 17:05:28 +00:00
.gitignore .gitignore: Add new autotools file 'test-driver' 2014-04-21 13:41:42 -07:00
.gitlab-ci.yml gitlab CI: use the fdo ci-templates repository 2020-05-20 11:01:13 +10:00
.travis.yml travis: Add OSX meson build to matrix 2019-05-02 15:42:58 +00:00
COPYING modesetting: Merge modesetting's COPYING into the xserver's. 2014-09-15 12:46:02 -07:00
Makefile.am xfree86: Merge vbe into int10 2019-10-02 10:03:26 -04:00
README.md Fix spelling/wording issues 2020-07-05 13:07:33 -07:00
autogen.sh autogen: Set a default subject prefix for patches 2016-02-08 17:41:38 -05:00
configure.ac xwayland: Add a pkg-config file for Xwayland 2020-07-08 08:56:32 +00:00
devbook.am doc: Create a script to filter xmlto output 2015-01-05 14:24:06 -08:00
docbook.am docbook.am: embed css styles inside the HTML HEAD element 2011-09-21 14:07:49 -07:00
manpages.am man: Fix automake seddery 2018-05-08 12:15:30 -04:00
meson.build meson: Also ignore kms, kms_udev, hal options on Cygwin 2020-07-29 21:01:59 +01:00
meson_options.txt xwayland: Add a pkg-config file for Xwayland 2020-07-08 08:56:32 +00:00
xorg-server.m4 xorg-server.m4: just all cflags instead of just sdkdir 2018-09-20 20:12:24 +01:00
xorg-server.pc.in xfree86: link modules against Xorg symbols on Cygwin 2012-04-05 21:57:07 -05:00
xserver.ent.in doc: relocate xserver.ent in the package root directory 2011-05-14 11:22:26 -07:00

README.md

X Server

The X server accepts requests from client applications to create windows, which are (normally rectangular) "virtual screens" that the client program can draw into.

Windows are then composed on the actual screen by the X server (or by a separate composite manager) as directed by the window manager, which usually communicates with the user via graphical controls such as buttons and draggable titlebars and borders.

For a comprehensive overview of X Server and X Window System, consult the following article: https://en.wikipedia.org/wiki/X_server

All questions regarding this software should be directed at the Xorg mailing list:

https://lists.freedesktop.org/mailman/listinfo/xorg

The primary development code repository can be found at:

https://gitlab.freedesktop.org/xorg/xserver

For patch submission instructions, see:

https://www.x.org/wiki/Development/Documentation/SubmittingPatches

As with other projects hosted on freedesktop.org, X.Org follows its Code of Conduct, based on the Contributor Covenant. Please conduct yourself in a respectful and civilized manner when using the above mailing lists, bug trackers, etc:

https://www.freedesktop.org/wiki/CodeOfConduct