Commit graph

1699 commits

Author SHA1 Message Date
Peter Hutterer
ae3eca18ce Fix _XkbReadGetDeviceInfoReply for nButtons == dev->buttons
XkbGetDeviceInfo(dpy, XkbXI_ButtonActionsMask, 2, 0, 0) always returns
NULL because the number of buttons on the device equals (unsurpisingly)
the number of buttons requested (i.e. first + nBtns == dev->nbuttons).

This currently causes it to bail out and return NULL.

Fixes f293659d5a
2024-01-18 00:07:04 +00:00
Walter Harms
0a951047f6 _XimProtoIMFree:no need to check arg for Xfree()
Xfree() will happily ignore NULL, no need to check
2024-01-08 17:18:19 +01:00
Walter Harms
dce614623e _XimEncodeString:no need to check arg for Xfree()
Xfree() will happily ignore NULL, no need to check
2024-01-08 17:01:44 +01:00
Walter Harms
4f78b61580 Fix XCreateIC() memory leak (Part 2)
Direct leak of 12 byte(s) in 2 object(s) allocated from:
    #0 0x7f4f25c3f7a7 in strdup (/usr/lib64/libasan.so.6+0x5c7a7)
    #1 0x7f4f252ce6a1 in _XimEncodeString libX11-1.8.3/modules/im/ximcp/imRm.c:818
    #2 0x7f4f252ce6a1 in _XimEncodeString libX11-1.8.3/modules/im/ximcp/imRm.c:807
    #3 0x7f4f252d2f0f in _XimSetICValueData libX11-1.8.3/modules/im/ximcp/imRm.c:2912
    #4 0x7f4f252b536a in _XimLocalCreateIC libX11-1.8.3/modules/im/ximcp/imLcIc.c:176
    #5

 0x7f4f251f0105 in XCreateIC libX11-1.8.3/src/xlibi18n/ICWrap.c:251

detected and fix by Patrick Lerda <patrick9876@free.fr>
applied with adjustment, do changes when OOM (unlikely but good practise)
2024-01-08 16:50:52 +01:00
Walter Harms
ed0b97e480 _XimLocalDestroyIC:fix possible mem leak
Adapted:
Fix XCreateIC() memory leak by Patrick Lerda <patrick9876@free.fr> Part 1
2024-01-08 16:21:02 +01:00
Walter Harms
07978634b8 _XimLocalCreateIC: get rid of bzero 2024-01-08 15:16:11 +01:00
Walter Harms
59c9a89e25 _XimLocalCreateIC: minor cleanup
minor cleanup, no code change
2024-01-08 15:09:49 +01:00
Walter Harms
e5b14e59a1 _XimLocalCreateIC:no need to check arg for Xfree()
Xfree() will happily ignore NULL, no need to check
2024-01-08 13:35:28 +01:00
Walter Harms
e6310b5212 _XimLocalDestroyIC: no need to check arg for Xfree()
Xfree() will happily ignore NULL, no need to check
2024-01-08 13:06:03 +01:00
Walter Harms
1261802fb3 fix table width
the width of first column was to small and
caused a hyphenation. there is only one word,
fix for me.
2024-01-07 18:30:30 +01:00
Alan Coopersmith
c745719e23
libX11 1.8.7
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-10-03 09:00:01 -07:00
Yair Mizrahi
7916869d16 CVE-2023-43787: Integer overflow in XCreateImage() leading to a heap overflow
When the format is `Pixmap` it calculates the size of the image data as:
    ROUNDUP((bits_per_pixel * width), image->bitmap_pad);
There is no validation on the `width` of the image, and so this
calculation exceeds the capacity of a 4-byte integer, causing an overflow.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-09-22 15:15:34 -07:00
Alan Coopersmith
b4031fc023 XCreatePixmap: trigger BadValue error for out-of-range dimensions
The CreatePixmap request specifies height & width of the image as CARD16
(unsigned 16-bit integer), so if either is larger than that, set it to 0
so the X server returns a BadValue error as the protocol requires.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-09-22 15:12:38 -07:00
Alan Coopersmith
73a37d5f2f XPutImage: clip images to maximum height & width allowed by protocol
The PutImage request specifies height & width of the image as CARD16
(unsigned 16-bit integer), same as the maximum dimensions of an X11
Drawable, which the image is being copied to.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-09-22 15:12:38 -07:00
Alan Coopersmith
204c3393c4 CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage()
When splitting a single line of pixels into chunks to send to the
X server, be sure to take into account the number of bits per pixel,
so we don't just loop forever trying to send more pixels than fit in
the given request size and not breaking them down into a small enough
chunk to fix.

Fixes: "almost complete rewrite" (Dec. 12, 1987) from X11R2
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-09-22 15:12:03 -07:00
Alan Coopersmith
6858d468d9 CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
Make sure we allocate enough memory in the first place, and
also handle error returns from _XkbReadBufferCopyKeySyms() when
it detects out-of-bounds issues.

Reported-by: Gregory James DUCK <gjduck@gmail.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-09-22 14:50:34 -07:00
Alan Coopersmith
78b37accff XOpenDisplay: ensure each screen has a valid root_visual pointer
Other code assumes this pointer cannot be NULL, so fail the connection
if a bug has caused the X server to give a non-existent visual ID for
the default visual of any screen.

Reported-by: Gregory James DUCK <gjduck@gmail.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-09-17 10:11:02 -07:00
Antti Savolainen
3962080b78 Add two compose sequences for dagger/obelisk symbols
The dagger symbol has several modern uses such as marking someone as
dead or something as extinct. Historically it has been used to indicate
a footnote.
2023-09-09 13:53:16 +00:00
Christopher Chavez
15bbc81cf6 Xutil.h: use Bool for XEmptyRegion(), XEqualRegion() 2023-08-29 22:50:39 +00:00
Benno Schulenberg
5433cb9351 nls: add two compose sequences for currency symbol ฿ (the Thai baht)
The compose sequences are obvious: the capital B plus the vertical bar.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-08-29 21:04:34 +00:00
Benno Schulenberg
2ff401a472 nls: reshuffle the compose sequences for currencies into ascending order
That is: sort them according to code point.
2023-08-29 21:04:34 +00:00
Benno Schulenberg
c0e2d42d41 nls: add compose sequences for (guaraní), (kip), and (tugrik)
When Ghana, Nigeria, Costa Rica and El Salvador have compose sequences
for their currency symbols (cedi: `₵`, naira: `₦`, colón: `₡`), then
Paraguay, Laos, and Mongolia deserve to have such sequences as well.

The sequences should be obvious: the relevant capital letter of the
name of the currency (G, K, T) plus a vertical bar, a minus sign,
and an equals sign, respectively.

Also add two sequences for `$` (the dollar sign), for consistency.

Drop the tentative comments for drachma, penny, and austral, as those
currencies have been obsolete for more than twenty years.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-08-29 21:04:34 +00:00
Benno Schulenberg
d9fe5dc735 nls: change result of sequence <C> <bar> from ¢ (CENT) to (CEDI)
As a cent is a small coin, it makes no sense to use an uppercase letter
to compose the `¢` symbol -- having four sequences with a lowercase `c`
plus a `bar` or a `slash` available for composing `¢` should be enough.

Use the sequence `<C> <bar` (with the uppercase `C`) for composing `₵`
(the CEDI SIGN) instead.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-08-29 21:04:34 +00:00
Antti Savolainen
031e63060e nls: add a compose sequence with double dead_tilde for ≈ (almost equal to)
Some keyboards lack direct asciitilde and instead have only dead tilde.
This compose sequence allows those keyboards to type the almost equal
to sign.
2023-08-27 06:33:53 +00:00
Benno Schulenberg
df2a18c464 nls: delete twenty seven untypable Greek compose sequences
Only a few keyboard layouts contain the `dead_iota` keysym, and none
of those layouts contains the `acute` keysym, so compose sequences
that combine the two symbols cannot be typed and are thus useless.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-08-25 17:15:41 +00:00
Alan Coopersmith
44f908d928 docs: fix names for XkbKeyKeyType & XkbKeyKeyTypeIndex
Implementation had "Key" twice in these macro names,
but the docs had only listed it once.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 15:27:48 -07:00
Alan Coopersmith
7b16c55063 docs: remove XkbKeySymsOffset
This function was documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 15:27:48 -07:00
Alan Coopersmith
41a157dfee docs: remove XkbGetNameChanges
This function was documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 15:27:48 -07:00
Alan Coopersmith
3442a8cee2 docs: remove XkbChangeIndicators and Xkb{Get,Note}IndicatorChanges
These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 15:27:13 -07:00
Alan Coopersmith
b7a15d6c6e docs: XkbSAActionSetCtrls is really named XkbActionSetCtrls
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 14:31:20 -07:00
Alan Coopersmith
a1d8dd7267 docs: remove XkbGetStickyKeysOptions & XkbSetStickyKeysOptions
These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 14:18:32 -07:00
Alan Coopersmith
bf13f19740 docs: remove XkbGetSlowKeysDelay & XkbSetSlowKeysDelay
These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 14:09:35 -07:00
Alan Coopersmith
caab7321d2 docs: remove XkbGetAccessXTimeout & XkbSetAccessXTimeout
These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 14:04:15 -07:00
Alan Coopersmith
843e89bd24 docs: remove XkbAllocDeviceLedInfo
This function was documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 12:58:47 -07:00
Alan Coopersmith
2686dd7a9d docs: finish removing XkbGetBounceKeysDelay & XkbSetBounceKeysDelay
These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-20 12:41:42 -07:00
G. Branden Robinson
188991fe7e configure script reports stray, confusing "yes"
Closes issue #194

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-19 12:54:26 -07:00
Benno Schulenberg
70f44d76fd nls: add, correct, and normalize some comments of compose sequences
Add comments for the Khmer digraphs, correct the comments for the
Arabic lam-alef decompositions, and normalize the comments for the
Breton digraphs and trigraphs.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-08-17 16:44:16 +02:00
Benno Schulenberg
2a57c32e14 nls: harmonize the comments for compose sequences with combining accents
Replace the "WITH" with "plus" and lowercase the "AND" in the comments
for sequences with combining accents, to make it slightly clearer that
the resulting string consists of multiple code points.  Also, use the
word "COMBINING" in the names of the accents, so that these sequences
can be easily grepped, and drop the redundant word "ACCENT".

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-08-17 16:30:23 +02:00
Alan Coopersmith
757ab5ddd8 Remove XkbSetBounceKeysDelay.man from list of man pages to build
Fixes: f90e6bfa ("rm XkbSetBounceKeysDelay.man")

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-08-14 08:45:01 -07:00
Walter Harms
f90e6bface rm XkbSetBounceKeysDelay.man
there is no function XkbSetBounceKeysDelay().
It is listed in the specs but never implemented if someone
does it, feel free to get the file back.

closes issue #105
2023-08-13 22:42:50 +02:00
Benno Schulenberg
b2c3fb7b4d nls: use the shorter and more consistent name for the dead capital schwa
The `dead_SCHWA` name is available since xorgproto-2023.1, which was
released last month.
2023-07-13 21:12:24 +00:00
jmcwilliams403
e45dff5c2a NLS: Drop two math sequences, slightly clean up APL sequences.
* Two compose sequences containing `leftshoe` and `rightshoe` are
dropped as no keyboard layout uses these keysyms.
* The compose sequences for `therefore` and `because` in the APL
block are moved to ascending Unicode order.
* The comments for the compose sequences for `U2299` are corrected to
more accurately reflect its sequence nodes and its real name in
Unicode.
2023-07-08 06:41:35 +00:00
Benno Schulenberg
af2b6dfab1 nls: delete twenty eight compose sequences that cannot be typed
The letters `Ǫ` (U+01EA, O with ogonek), `Ȩ` (U+0228, E with cedilla),
`Ȯ` (U+022E, O with dot above), `Ạ` (U+1EA0, A with dot below), and
their lowercase forms do not occur in any layout of xkeyboard-config,
meaning that the compose sequences that contained these letters could
not be typed.  Delete their dead weight.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-06-25 09:23:48 +02:00
Benno Schulenberg
ab0442d3fa nls: remove four unobvious and redundant compose sequences for ¥ (yen)
Composing ¥ with Y and a minus sign seems to have been added in analogy
to composing £ with L and a minus sign.  But ¥ clearly has a double line
through it, so using the equals sign for this is far more logical (and
those compose sequences of course exist).  Also, L plus an equals sign
produces ₤ (lira), not £ (sterling).  So... make these sequences more
consistent and allow composing ¥ only with Y/y plus an equals sign.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-06-24 10:21:29 +02:00
Benno Schulenberg
933912480c nls: order a few compose sequences left first, and in mirroring pairs 2023-06-24 10:03:29 +02:00
Benno Schulenberg
178c4fefd3 nls: remove three duplicated combining acute accents
For the Cyrillic YU with combining acute accent, the string between
the quotes contained two U+0301 code points, whereas one is enough,
like for all the neighboring strings.

(This duplication was found by accident with `nano --mini --cons`.)
2023-06-16 09:40:19 +02:00
Alan Coopersmith
695e90ad26
libX11 1.8.6
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-06-15 09:14:48 -07:00
Alan Coopersmith
304a654a0d InitExt.c: Add bounds checks for extension request, event, & error codes
Fixes CVE-2023-3138: X servers could return values from XQueryExtension
that would cause Xlib to write entries out-of-bounds of the arrays to
store them, though this would only overwrite other parts of the Display
struct, not outside the bounds allocated for that structure.

Reported-by: Gregory James DUCK <gjduck@gmail.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-06-10 16:30:07 -07:00
Alan Coopersmith
71b08b8af2
libX11 1.8.5
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
2023-05-31 17:45:40 -07:00
Benno Schulenberg
03ba014094 nls: use a slash instead of a combining solidus in compose sequences
First: combining diacritics like the combining long solidus (`U+0338`)
are not meant to be used in compose sequences.  Second: there is just
one layout in xkeyboard-config that contains the `U0338` character:
the deprecated/obsolete German T3 layout.  So, practically speaking,
these compose sequences with `U0338` were untypable.  So, use a slash
instead, that almost all layouts have.  This does require that the
sequence `<Compose> <less> <slash>` changes its meaning from backslash
to not-less-than (`≮`).  This seems like an acceptable sacrifice, as
the sequence `<Compose> <slash> <slash>` is a faster/easier sequence
for the backslash and most layouts contain a backslash already anyway.

Signed-off-by: Benno Schulenberg <bensberg@telfort.nl>
2023-05-23 22:18:07 +00:00