Commit Graph

7780 Commits

Author SHA1 Message Date
matthieu
d707307866 Update to xserver 21.1.13. 2024-04-27 17:37:14 +00:00
okan
fff7e715c9 Grab the pointer against the root window instead of the client we're attempting
to move and/or resize; prevents XNextEvent() from blocking on a client that
might have been moved to a Withdrawn state.

behavior noticed and reported by zenitds at proton.me - thanks!
2024-04-10 19:38:22 +00:00
jsg
d84de0f2ad intel/dev: Add 0x56be and 0x56bf DG2 PCI IDs
From Jordan Justen
98f3d072b428f93d799d17ab4e56f963206c9a2f in mainline Mesa
2024-04-09 01:54:58 +00:00
jsg
7852424eb6 intel/dev: Add ATS-M PCI ID for Data Center GPU Flex 170G
From Jordan Justen
ce900dcbb133e2e9b8b2478fce8aa1c146d741bb in mainline Mesa
2024-04-09 01:51:24 +00:00
jsg
c768c2486f intel/dev: Adjust device strings for ATS-M devices
From Jordan Justen
59e0c38427df012ded895229dbf3d955efb59362 in mainline Mesa
2024-04-09 01:49:12 +00:00
jsg
b6c6970126 intel/dev: update DG2 device names
2777a4c692c78bc373b89a74f76471c6aef7f7ff in mainline Mesa
2024-04-09 01:45:54 +00:00
matthieu
f80771b34a update 2024-04-07 13:45:53 +00:00
matthieu
72350a0520 Update to xserver 21.1.12
The security patches were already commited, sync with the rest
of the 21.1.12 relase.
2024-04-07 11:42:56 +00:00
matthieu
a9b0c2567c The DMX extension was removed in xserver 21.1. 2024-04-07 06:31:07 +00:00
jsg
df0b50e2ba fix the build on archs where vulkan is not built
reported by deraadt@
2024-04-03 22:10:09 +00:00
kettenis
d230847f48 Enable PAC in addition to BTI on arm64 such that JIT code matches the
default branch protection provided by our base compiler.

ok jsg@
2024-04-03 21:47:30 +00:00
matthieu
300e0e3cf4 Fix refcounting of glyphs during ProcRenderAddGlyphs() (CVE-2024-31083) 2024-04-03 16:27:34 +00:00
matthieu
a56b04ec0c Need to use unswapped length to send reply in
ProcXIGetSelectedEvents() (CVE-2024-31080) and
ProcXiPassiveGrabDevice() (CVE-2024-31081)
2024-04-03 16:26:45 +00:00
jsg
6621640bea update 2024-04-02 11:24:00 +00:00
jsg
e8f0918f44 sync 2024-04-02 10:43:16 +00:00
jsg
f3c1e4e9c8 Merge Mesa 23.3.6 2024-04-02 10:41:59 +00:00
jsg
874d2ba3aa Import Mesa 23.3.6 2024-04-02 09:25:31 +00:00
matthieu
fc0da74918 update 2024-03-30 15:43:09 +00:00
kettenis
d127cc3546 Tell LLVM to generate code with BTI instructions.
"looks ok" jsg@, ok deraadt@
2024-03-18 00:15:10 +00:00
jsg
a4d4e6aac7 intel/dev: Add 2 additional ADL-N PCI ids
From Jordan Justen
62b72b6be9742c655d381348c6b161afc6b5396f in mainline Mesa
2024-02-29 10:15:05 +00:00
thfr
c1ff7e5473 Fix off-by-one in dlist allocation when checking whether to allocate a
new block. This fixes segfaults in dlist functions that occur on
applications making heavy use of display lists that exceed BLOCK_SIZE.

ok jsg@ and stsp@, who also both helped me track down the issue.
2024-02-09 13:17:54 +00:00
jsg
f572ae98f3 update 2024-01-30 07:50:26 +00:00
jsg
433f96b997 sync 2024-01-30 06:18:19 +00:00
jsg
e07bf2bdea Merge libdrm 2.4.120 2024-01-30 06:16:37 +00:00
jsg
8e87338e43 Import libdrm 2.4.120 2024-01-30 06:12:01 +00:00
matthieu
b8b69682ef update 2024-01-28 14:24:54 +00:00
matthieu
78af578bf2 Update to xbiff 1.0.5 2024-01-28 14:01:27 +00:00
matthieu
e053fd02c3 Update to xeyes 1.3.0 2024-01-28 14:00:32 +00:00
matthieu
639908544d Update to fonttosfnt 1.2.3 2024-01-28 13:59:43 +00:00
matthieu
9ad627f7b7 Update to xserver 21.1.11.
All the security fixes have already been committed.
2024-01-28 09:58:04 +00:00
claudio
553e6668eb Rewrite the privsep imsg code using the new ibuf API.
Properly wrap the imsg_read() / imsg_get() calls in a while loop.
Do not initialize the fd of the struct ibuf to -1 (this is already done).
Rewrite the imsg parser using imsg_get_ibuf(), ibuf_get and a local new
function ibuf_get_string() which abstracts the extraction of the strings
from the ibuf.
Properly clear and free the user, pass and style variables.

OK tb@ matthieu@
2024-01-22 10:13:34 +00:00
kettenis
669d3297eb WSDISPLAY_TYPE_RKDRM was renamed to WSDISPLAY_TYPE_KMS 2024-01-19 17:52:03 +00:00
matthieu
e3932c6814 update 2024-01-16 13:14:26 +00:00
matthieu
a631224042 Multiple issues have been found in the X server and Xwayland
implementations:

1) CVE-2023-6816 can be triggered by passing an invalid array index to
DeviceFocusEvent or ProcXIQueryPointer.

2) CVE-2024-0229 can be triggered if a device has both a button and a
key class and zero buttons.

3) CVE-2024-21885 can be triggered if a device with a given ID was
removed and a new device with the same ID added both in the same
operation.

4) CVE-2024-21886 can be triggered by disabling a master device with
disabled slave devices.

5) CVE-2024-0409 can be triggered by enabling SELinux
xserver_object_manager and running a client.

6) CVE-2024-0408 can be triggered by enabling SELinux
xserver_object_manager and creating a GLX PBuffer.
2024-01-16 12:34:23 +00:00
matthieu
6367cbe266 Update xserver to 21.1.10.
The security fixes have already been committed.
2024-01-07 11:11:57 +00:00
matthieu
70f838e990 update 2024-01-05 07:05:51 +00:00
millert
975ee75e4b Substitute "100" for __default_termid__ instead of "vt100".
The "vt" prefix is optional for the default terminal ID.
Fixes an instance of "vtvt100" in the installed man page.
OK matthieu@
2023-12-19 20:31:21 +00:00
claudio
77f3ff527f Replace another memset() with explicit_bzero() since the goal is the reason
why we have explicit_bzero().
OK matthieu@
2023-12-14 09:46:10 +00:00
claudio
f6e6877b93 Use proper len in strndup() call for the style argument.
OK matthieu@
2023-12-14 09:44:15 +00:00
matthieu
f33da8b94d The previous fix from X.Org was incorrect. This fixes it.
Xi: allocate enough XkbActions for our buttons
CVE-2023-6377
2023-12-13 06:34:18 +00:00
matthieu
679d2a4fc6 randr: avoid integer truncation in length check of ProcRRChange*Property
CVE-2023-6478
2023-12-13 06:21:57 +00:00
matthieu
1df2839930 Xi: allocate enough XkbActions for our buttons
CVE-2023-6377
2023-12-13 06:20:16 +00:00
jsg
0eabb5c60c r600/sfn: Don't try to re-use iterators when the set is made empty
From Gert Wollny
c13de0509c43f9b9764dc939aa64fe70c6a80870 in mainline Mesa

fixes games/xonotic crash on r600 reported by edd@ on bugs@
2023-12-01 07:56:04 +00:00
matthieu
ccdae98fc7 Add group handling to match fbtab(5). Suggested by and ok aja@ 2023-11-10 18:49:21 +00:00
jsg
e200c394d8 meson: use llvm-config instead of cmake to fix linking errors with meson 1.2.1
From Marek Olsak
d11900d5e76922790de90ebfb89f918673759a88 in mainline Mesa
2023-11-10 03:59:40 +00:00
jsg
1580297f05 link libgbm with xrandr-xcb
fixes graphics/clutter/cogl build failure reported by tb@
2023-11-03 00:58:54 +00:00
jsg
414c46eefe update 2023-11-02 06:09:39 +00:00
jsg
3c32459578 don't warn when file descriptor equality is unknown
linux uses kcmp(2) with KCMP_FILE, we have no equivalent
2023-11-02 06:00:03 +00:00
jsg
ff8d3c99f3 sync 2023-11-02 04:55:01 +00:00
jsg
4f0d84743f Merge Mesa 23.1.9 2023-11-02 04:53:12 +00:00