<feed xmlns='http://www.w3.org/2005/Atom'>
<title>nx-libs/nx-X11/programs/Xserver/GL/glx/glxcmdsswap.c, branch pr/drop-bin-wrappers</title>
<subtitle>NXv3 (redistributed) 
</subtitle>
<id>https://openid.arctica-project.org/nx-libs/atom?h=pr%2Fdrop-bin-wrappers</id>
<link rel='self' href='https://openid.arctica-project.org/nx-libs/atom?h=pr%2Fdrop-bin-wrappers'/>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/'/>
<updated>2016-12-04T20:31:10+00:00</updated>
<entry>
<title>Drop glx_ansic.h wrapper and call malloc, realloc, free and str-funcs directly.</title>
<updated>2016-12-04T20:31:10+00:00</updated>
<author>
<name>Kristian Høgsberg</name>
<email>krh@redhat.com</email>
</author>
<published>2016-10-31T14:06:37+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=cee997dacb28aa9378b834b66a33c441145dceb7'/>
<id>urn:sha1:cee997dacb28aa9378b834b66a33c441145dceb7</id>
<content type='text'>
 commit 2d2d38d17cc2558f8a41166a4a1578bc4c663c37
 Author: Kristian Høgsberg &lt;krh@redhat.com&gt;
 Date:   Fri Mar 17 01:47:25 2006 +0000

        Check for glproto when building GLX and make sure we have at least 1.4.6.
        Drop glx_ansic.h wrapper and call xalloc, xrealloc, xfree and str-funcs
            directly.

     We don't check the glproto version as we know what it is (we have our own proto file).

     Furthermore, we skip the switch from --glX&lt;func&gt; -&gt; x&lt;func&gt; and directly switch to
     &lt;func&gt; (e.g. __glXMalloc() -&gt; malloc()).

     Backported-to-NX-by: Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;
</content>
</entry>
<entry>
<title>VCS info lines: Remove ancient X.org / XFree86 VCS info line from code files.</title>
<updated>2016-07-05T23:09:15+00:00</updated>
<author>
<name>Mike Gabriel</name>
<email>mike.gabriel@das-netzwerkteam.de</email>
</author>
<published>2016-07-05T14:32:57+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=6144b615dd7ae2acd786aaa08f66c9743870b709'/>
<id>urn:sha1:6144b615dd7ae2acd786aaa08f66c9743870b709</id>
<content type='text'>
 This has already been started while replacing copyright info in file
 headers and has now been completed with this commit.
</content>
</entry>
<entry>
<title>remove unreferenced NEED_EVENTS/NEED_REPLIES</title>
<updated>2016-07-05T20:55:07+00:00</updated>
<author>
<name>Ulrich Sibiller</name>
<email>uli42@gmx.de</email>
</author>
<published>2016-07-04T19:11:21+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=fa651994740d4381d8a8ab72e2ac3ef38fba3dde'/>
<id>urn:sha1:fa651994740d4381d8a8ab72e2ac3ef38fba3dde</id>
<content type='text'>
Remove defines of NEED_EVENTS and NEED_REPLIES because they are never
used anywhere.

Basically these three commits, but as they are newer and to not match
the code structure the patches have not been applied but replaced by
sed + manual intervention:

   From cb95642dc8edebb2935dd471f8b339cb98aa8481 Mon Sep 17 00:00:00 2001
   From: Peter Hutterer &lt;peter.hutterer@redhat.com&gt;
   Date: Fri, 28 Nov 2008 22:28:32 +1000
   Subject: Remove #define NEED_EVENTS and NEED_REPLIES

   A grep on xorg/* revealed there's no consumer of this define.

   Quote Alan Coopersmith:
   "The consumer was in past versions of the headers now located
   in proto/x11proto - for instance, in X11R6.0's xc/include/Xproto.h,
   all the event definitions were only available if NEED_EVENTS were
   defined, and all the reply definitions required NEED_REPLIES.

   Looks like Xproto.h dropped them by X11R6.3, which didn't have
   the #ifdef's anymore, so these are truly ancient now."

   Signed-off-by: Peter Hutterer &lt;peter.hutterer@redhat.com&gt;
   Signed-off-by: Adam Jackson &lt;ajax@redhat.com&gt;

--

   From 6de368c9aa7ccd2fcd62fca5a2b278913db4d03d Mon Sep 17 00:00:00 2001
   From: Fernando Carrijo &lt;fcarrijo@yahoo.com.br&gt;
   Date: Thu, 1 Jul 2010 06:50:47 -0300
   Subject: Purge macros NEED_EVENTS and NEED_REPLIES

   Signed-off-by: Fernando Carrijo &lt;fcarrijo@yahoo.com.br&gt;
   Acked-by: Tiago Vignatti &lt;tiago.vignatti@nokia.com&gt;
   Reviewed-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;

--

   From 57c03e52e6b4e3ed54df5fdd778865467d08e119 Mon Sep 17 00:00:00 2001
   From: Fernando Carrijo &lt;fcarrijo@yahoo.com.br&gt;
   Date: Thu, 1 Jul 2010 06:59:48 -0300
   Subject: Purge macro NEED_EVENTS

   Signed-off-by: Fernando Carrijo &lt;fcarrijo@yahoo.com.br&gt;
   Acked-by: Tiago Vignatti &lt;tiago.vignatti@nokia.com&gt;
   Reviewed-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
</content>
</entry>
<entry>
<title>Remove unneccesary casts from WriteToClient calls</title>
<updated>2016-07-05T11:32:05+00:00</updated>
<author>
<name>Alan Coopersmith</name>
<email>alan.coopersmith@oracle.com</email>
</author>
<published>2016-07-03T22:28:47+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=f6a1bda2dff0c70aa13f3cb763a9b08c4c037c53'/>
<id>urn:sha1:f6a1bda2dff0c70aa13f3cb763a9b08c4c037c53</id>
<content type='text'>
 Casting return to (void) was used to tell lint that you intended
 to ignore the return value, so it didn't warn you about it.

 Casting the third argument to (char *) was used as the most generic
 pointer type in the days before compilers supported C89 (void *)
 (except for a couple places it's used for byte-sized pointer math).

 Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
 Reviewed-by: Keith Packard &lt;keithp@keithp.com&gt;
 Tested-by: Daniel Stone &lt;daniel@fooishbar.org&gt;
 Backport to nx-libs: Mike Gabriel &lt;mike.gabriel@das-netzwerkteam.de&gt;
</content>
</entry>
<entry>
<title>glx: Pass remaining request length into -&gt;varsize (v2) [CVE-2014-8098 8/8] (V3)</title>
<updated>2015-02-14T15:14:32+00:00</updated>
<author>
<name>Adam Jackson</name>
<email>ajax@redhat.com</email>
</author>
<published>2014-11-10T17:13:48+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=1ea1cd8c4f93b0c03e5b34fe174b3fc9f27c7dfa'/>
<id>urn:sha1:1ea1cd8c4f93b0c03e5b34fe174b3fc9f27c7dfa</id>
<content type='text'>
v2: Handle more multiplies in indirect_reqsize.c (Julien Cristau)

v3: RHEL5 backport

v4: backport to nx-libs 3.6.x (Mike DePaulo)

Reviewed-by: Julien Cristau &lt;jcristau@debian.org&gt;
Reviewed-by: Michal Srb &lt;msrb@suse.com&gt;
Reviewed-by: Andy Ritger &lt;aritger@nvidia.com&gt;
Signed-off-by: Adam Jackson &lt;ajax@redhat.com&gt;
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Signed-off-by: Fedora X Ninjas &lt;x@fedoraproject.org&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>glx: Length checking for RenderLarge requests (v2) [CVE-2014-8098 3/8] (v3)</title>
<updated>2015-02-14T15:14:32+00:00</updated>
<author>
<name>Adam Jackson</name>
<email>ajax@redhat.com</email>
</author>
<published>2014-11-10T17:13:43+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=9c558f9ca2c0d4e34fa71dff272ed1c39c22cd9d'/>
<id>urn:sha1:9c558f9ca2c0d4e34fa71dff272ed1c39c22cd9d</id>
<content type='text'>
This is a half-measure until we start passing request length into the
varsize function, but it's better than the nothing we had before.

v2: Verify that there's at least a large render header's worth of
dataBytes (Julien Cristau)

v3: backport to RHEL5

v4: backport to nx-libs 3.6.x (Mike DePaulo)

Reviewed-by: Michal Srb &lt;msrb@suse.com&gt;
Reviewed-by: Andy Ritger &lt;aritger@nvidia.com&gt;
Signed-off-by: Adam Jackson &lt;ajax@redhat.com&gt;
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Signed-off-by: Fedora X Ninjas &lt;x@fedoraproject.org&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;

fixup swap
</content>
</entry>
<entry>
<title>glx: Top-level length checking for swapped VendorPrivate requests [CVE-2014-8098 4/8]</title>
<updated>2015-02-14T15:14:32+00:00</updated>
<author>
<name>Adam Jackson</name>
<email>ajax@redhat.com</email>
</author>
<published>2014-11-10T17:13:44+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=ad29acd7697e18333e164b1746f61c5a9e29a436'/>
<id>urn:sha1:ad29acd7697e18333e164b1746f61c5a9e29a436</id>
<content type='text'>
v2: backport to nx-libs 3.6.x (Mike DePaulo)

Reviewed-by: Keith Packard &lt;keithp@keithp.com&gt;
Reviewed-by: Julien Cristau &lt;jcristau@debian.org&gt;
Reviewed-by: Michal Srb &lt;msrb@suse.com&gt;
Reviewed-by: Andy Ritger &lt;aritger@nvidia.com&gt;
Signed-off-by: Adam Jackson &lt;ajax@redhat.com&gt;
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Signed-off-by: Fedora X Ninjas &lt;x@fedoraproject.org&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>glx: Length checking for GLXRender requests (v2) [CVE-2014-8098 2/8] (v3)</title>
<updated>2015-02-14T15:14:32+00:00</updated>
<author>
<name>Julien Cristau</name>
<email>jcristau@debian.org</email>
</author>
<published>2014-11-10T17:13:41+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=78b38a8a37e6105360c82a710ef62c92643ea4c1'/>
<id>urn:sha1:78b38a8a37e6105360c82a710ef62c92643ea4c1</id>
<content type='text'>
v2:
Remove can't-happen comparison for cmdlen &lt; 0 (Michal Srb)

v3: backport to RHEL5 hit old paths

v4: backport to nx-libs 3.6.x (Mike DePaulo)

Reviewed-by: Adam Jackson &lt;ajax@redhat.com&gt;
Reviewed-by: Michal Srb &lt;msrb@suse.com&gt;
Reviewed-by: Andy Ritger &lt;aritger@nvidia.com&gt;
Signed-off-by: Julien Cristau &lt;jcristau@debian.org&gt;
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Signed-off-by: Fedora X Ninjas &lt;x@fedoraproject.org&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>glx: Be more paranoid about variable-length requests [CVE-2014-8093 1/6] (v2)</title>
<updated>2015-02-14T15:14:32+00:00</updated>
<author>
<name>Adam Jackson</name>
<email>ajax@redhat.com</email>
</author>
<published>2014-11-10T17:13:36+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=5c43bb2484414b37115dac56dc76f1ecf4c05837'/>
<id>urn:sha1:5c43bb2484414b37115dac56dc76f1ecf4c05837</id>
<content type='text'>
If the size computation routine returns -1 we should just reject the
request outright.  Clamping it to zero could give an attacker the
opportunity to also mangle cmdlen in such a way that the subsequent
length check passes, and the request would get executed, thus passing
data we wanted to reject to the renderer.

v3: backport to nx-libs 3.6.x (Mike DePaulo)
v2: backport to RHEL5 - fix swap paths
Reviewed-by: Keith Packard &lt;keithp@keithp.com&gt;
Reviewed-by: Julien Cristau &lt;jcristau@debian.org&gt;
Reviewed-by: Michal Srb &lt;msrb@suse.com&gt;
Reviewed-by: Andy Ritger &lt;aritger@nvidia.com&gt;
Signed-off-by: Adam Jackson &lt;ajax@redhat.com&gt;
Signed-off-by: Alan Coopersmith &lt;alan.coopersmith@oracle.com&gt;
Signed-off-by: Fedora X Ninjas &lt;x@fedoraproject.org&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;

fixup swaps
</content>
</entry>
<entry>
<title>Imported nx-X11-3.1.0-1.tar.gz</title>
<updated>2011-10-10T15:43:39+00:00</updated>
<author>
<name>Reinhard Tartler</name>
<email>siretart@tauware.de</email>
</author>
<published>2011-10-10T15:43:39+00:00</published>
<link rel='alternate' type='text/html' href='https://openid.arctica-project.org/nx-libs/commit/?id=f4092abdf94af6a99aff944d6264bc1284e8bdd4'/>
<id>urn:sha1:f4092abdf94af6a99aff944d6264bc1284e8bdd4</id>
<content type='text'>
Summary: Imported nx-X11-3.1.0-1.tar.gz
Keywords:

Imported nx-X11-3.1.0-1.tar.gz
into Git repository
</content>
</entry>
</feed>
