Alan Coopersmith 73c63afb93 Xi: unvalidated lengths in Xinput extension [CVE-2014-8095] ... Multiple functions in the Xinput extension handling of requests from clients failed to check that the length of the request sent by the client was large enough to perform all the required operations and thus could read or write to memory outside the bounds of the request buffer. This commit includes the creation of a new REQUEST_AT_LEAST_EXTRA_SIZE macro in include/dix.h for the common case of needing to ensure a request is large enough to include both the request itself and a minimum amount of extra data following the request header. Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com> Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>		2014-12-08 18:09:48 -08:00
..
Makefile.am	…
allowev.c	…
allowev.h	…
chgdctl.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
chgdctl.h	…
chgfctl.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
chgfctl.h	…
chgkbd.c	…
chgkbd.h	…
chgkmap.c	…
chgkmap.h	…
chgprop.c	…
chgprop.h	…
chgptr.c	…
chgptr.h	…
closedev.c	…
closedev.h	…
devbell.c	…
devbell.h	…
exevents.c	…
exglobals.h	…
extinit.c	…
getbmap.c	…
getbmap.h	…
getdctl.c	…
getdctl.h	…
getfctl.c	…
getfctl.h	…
getfocus.c	…
getfocus.h	…
getkmap.c	…
getkmap.h	…
getmmap.c	…
getmmap.h	…
getprop.c	…
getprop.h	…
getselev.c	…
getselev.h	…
getvers.c	…
getvers.h	…
grabdev.c	…
grabdev.h	…
grabdevb.c	…
grabdevb.h	…
grabdevk.c	…
grabdevk.h	…
gtmotion.c	…
gtmotion.h	…
listdev.c	…
listdev.h	…
opendev.c	…
opendev.h	…
queryst.c	…
queryst.h	…
selectev.c	…
selectev.h	…
sendexev.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
sendexev.h	…
setbmap.c	…
setbmap.h	…
setdval.c	…
setdval.h	…
setfocus.c	…
setfocus.h	…
setmmap.c	…
setmmap.h	…
setmode.c	…
setmode.h	…
stubs.c	…
ungrdev.c	…
ungrdev.h	…
ungrdevb.c	…
ungrdevb.h	…
ungrdevk.c	…
ungrdevk.h	…
xiallowev.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xiallowev.h	…
xibarriers.c	…
xibarriers.h	…
xichangecursor.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xichangecursor.h	…
xichangehierarchy.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xichangehierarchy.h	…
xigetclientpointer.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xigetclientpointer.h	…
xigrabdev.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xigrabdev.h	…
xipassivegrab.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xipassivegrab.h	…
xiproperty.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xiproperty.h	…
xiquerydevice.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xiquerydevice.h	…
xiquerypointer.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xiquerypointer.h	…
xiqueryversion.c	…
xiqueryversion.h	…
xiselectev.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xiselectev.h	…
xisetclientpointer.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xisetclientpointer.h	…
xisetdevfocus.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xisetdevfocus.h	…
xiwarppointer.c	Xi: unvalidated lengths in Xinput extension [CVE-2014-8095]	2014-12-08 18:09:48 -08:00
xiwarppointer.h	…