xserver: Changes to 'refs/tags/xorg-server-1.19.5'

[Adam Jackson]

Tag 'xorg-server-1.19.5' created by Adam Jackson <ajax at redhat.com> at 2017-10-12 17:04 +0000

xorg-server-1.19.5

Changes since xorg-server-1.19.4:
Adam Jackson (2):
      Revert "xf86-video-modesetting: Add ms_queue_vblank helper [v3]"
      xserver 1.19.5

Michal Srb (1):
      os: Make sure big requests have sufficient length.

Nathan Kidd (7):
      Unvalidated lengths
      xfixes: unvalidated lengths (CVE-2017-12183)
      hw/xfree86: unvalidated lengths
      Xi: integer overflow and unvalidated length in (S)ProcXIBarrierReleasePointer
      Xi: fix wrong extra length check in ProcXIChangeHierarchy (CVE-2017-12178)
      dbe: Unvalidated variable-length request in ProcDbeGetVisualInfo (CVE-2017-12177)
      Unvalidated extra length in ProcEstablishConnection (CVE-2017-12176)

---
 Xext/panoramiX.c                                 |    3 
 Xext/saver.c                                     |    2 
 Xext/vidmode.c                                   |  129 ++++++++++++-----------
 Xext/xres.c                                      |    4 
 Xext/xvdisp.c                                    |    4 
 Xi/xibarriers.c                                  |    5 
 Xi/xichangehierarchy.c                           |    2 
 configure.ac                                     |    6 -
 dbe/dbe.c                                        |    5 
 dix/dispatch.c                                   |    7 +
 hw/dmx/dmxpict.c                                 |    2 
 hw/xfree86/common/xf86DGA.c                      |   81 ++++++++------
 hw/xfree86/dri/xf86dri.c                         |    1 
 hw/xfree86/drivers/modesetting/dri2.c            |   74 +++++++++----
 hw/xfree86/drivers/modesetting/driver.h          |   17 ---
 hw/xfree86/drivers/modesetting/drmmode_display.c |    9 +
 hw/xfree86/drivers/modesetting/present.c         |   25 +++-
 hw/xfree86/drivers/modesetting/vblank.c          |   67 ++---------
 os/io.c                                          |    5 
 pseudoramiX/pseudoramiX.c                        |    3 
 render/render.c                                  |    3 
 xfixes/cursor.c                                  |    5 
 xfixes/region.c                                  |    3 
 xfixes/saveset.c                                 |    1 
 xfixes/xfixes.c                                  |    1 
 25 files changed, 263 insertions(+), 201 deletions(-)
---