[PATCH] glx: Disable indirect GLX contexts by default.

Eric Anholt eric at anholt.net
Thu Sep 4 10:59:40 PDT 2014


Almost every situation of someone running indirect GLX is a mistake
that results in X Server crashes.  Indirect GLX is the cause of
regular security vulnerabilities, and rarely provides any capability
to the user.  Just disable it unless someone wants to enable it for
their special use case (using +iglx on the command line).

Signed-off-by: Eric Anholt <eric at anholt.net>
---

I kept saying I as going to send out this patch, and since I just
crashed my server a few times from trying to run Xephyr -glamor with a
broken driver, it's probably time.

 os/utils.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/os/utils.c b/os/utils.c
index f319743..c83f77d 100644
--- a/os/utils.c
+++ b/os/utils.c
@@ -194,7 +194,7 @@ Bool noGEExtension = FALSE;
 
 Bool CoreDump;
 
-Bool enableIndirectGLX = TRUE;
+Bool enableIndirectGLX = FALSE;
 
 #ifdef PANORAMIX
 Bool PanoramiXExtensionDisabledHack = FALSE;
-- 
2.1.0



More information about the xorg-devel mailing list