xserver-multidpi/os
Michal Srb e751722a7b os: Make sure big requests have sufficient length.
A client can send a big request where the 32B "length" field has value
0. When the big request header is removed and the length corrected,
the value will underflow to 0xFFFFFFFF.  Functions processing the
request later will think that the client sent much more data and may
touch memory beyond the receive buffer.

Signed-off-by: Eric Anholt <eric@anholt.net>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
(cherry picked from commit 9c23685009)
2017-10-12 12:24:49 -04:00
..
.gitignore dix and os: gitignore dix.O and os.O 2011-09-23 17:14:47 -07:00
access.c Revert "XDMCP: For IPv6 add link local addresses to the end of the list" 2016-06-21 11:45:17 -04:00
auth.c Brown bag commit to fix 957e8d (arc4random_buf() support) 2017-03-01 15:26:06 -05:00
backtrace.c Replace 'sun' with '__sun' 2015-11-30 11:51:22 -05:00
busfault.c os: Fix iteration over busfaults 2017-03-15 13:27:11 -04:00
client.c Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
connection.c AttendClient of grab-pervious client must queue to saved_ready_clients [v2] 2017-01-11 15:04:12 -05:00
inputthread.c os: log a bug whenever WriteToClient is called from the input thread 2017-02-28 13:02:20 -05:00
io.c os: Make sure big requests have sufficient length. 2017-10-12 12:24:49 -04:00
log.c os: Failure to remove a non-existent log file is not an error 2016-01-06 12:23:31 -05:00
Makefile.am os,dix: Depend custom libs on libs, not objects 2017-01-11 15:01:36 -05:00
mitauth.c auth: remove AuthToIDFunc and associated functions. Not used anymore. 2017-02-28 14:18:26 -05:00
oscolor.c Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
osdep.h auth: remove AuthToIDFunc and associated functions. Not used anymore. 2017-02-28 14:18:26 -05:00
osinit.c os: Handle SIGABRT 2017-09-25 15:34:10 -04:00
ospoll.c os: Clear saved poll events in listen so that edge triggering works 2016-09-22 14:55:01 -07:00
ospoll.h os: Add ospoll interface [v2] 2016-07-21 15:04:47 -04:00
reallocarray.c Import reallocarray() from OpenBSD 2015-04-21 16:57:08 -07:00
rpcauth.c auth: remove AuthToIDFunc and associated functions. Not used anymore. 2017-02-28 14:18:26 -05:00
strcasecmp.c Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
strcasestr.c Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
strlcat.c Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
strlcpy.c Introduce a consistent coding style 2012-03-21 13:54:42 -07:00
strndup.c os: Ensure <dix-config.h> is included in strndup.c 2013-02-14 09:20:46 -08:00
timingsafe_memcmp.c os: Squash missing declaration warning for timingsafe_memcmp 2017-03-02 17:21:50 -05:00
utils.c os: Fix warning in LockServer 2017-09-25 15:52:25 -04:00
WaitFor.c os: return 0 from check_timers if we touched any of them 2017-01-11 15:04:12 -05:00
xdmauth.c auth: remove AuthToIDFunc and associated functions. Not used anymore. 2017-02-28 14:18:26 -05:00
xdmcp.c os: Switch server to poll(2) [v3] 2016-07-21 15:04:47 -04:00
xprintf.c os/xprintf: add Xvscnprintf and Xscnprintf 2012-05-03 14:59:23 +10:00
xserver_poll.c os: Add poll emulation for mingw [v2] 2016-07-19 11:08:21 -07:00
xsha1.c os/xsha1.c: Add license and copyright attribution. 2015-01-02 13:39:52 -08:00
xstrans.c Clean up a couple of warnings in os/ 2013-10-31 16:58:12 -07:00