fdo-mirrors/xserver
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/xorg/xserver.git synced 2025-12-20 05:50:04 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
xserver/os
History
Exact
Matthieu Herrb e9ffc3a5f9 Fix CVE-2011-4029: File permission change vulnerability. 
Use fchmod() to change permissions of the lock file instead
of chmod(), thus avoid the race that can be exploited to set
a symbolic link to any file or directory in the system.

Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
(cherry picked from commit b67581cf82)
2011-10-29 19:09:07 +02:00
..
.gitignore .gitignore: use common defaults with custom section #24239 2009-11-11 21:40:20 -08:00
access.c os: Fix a memory leak 2011-01-06 15:16:28 -05:00
auth.c Constify function prototypes in auth & xdmcp code 2010-05-07 12:22:58 -07:00
backtrace.c Miscellaneous compilation warning fixes 2009-12-08 15:50:28 -08:00
connection.c Always call the flush callback chain when we flush client buffers 2010-08-06 08:28:10 -04:00
io.c os: Fix BigReq ignoring when another request is pending 2010-11-13 15:17:05 -08:00
log.c XQuartz: Cleanup some compiler warnings 2010-12-03 21:56:20 -08:00
Makefile.am os: Prevent backtrace from being stopped in noreturn functions. 2010-03-25 06:03:43 +01:00
mitauth.c Replace X-allocation functions with their C89 counterparts 2010-05-13 00:22:37 +07:00
oscolor.c Rework symbol visibility for easier maintenance 2008-12-03 05:43:34 -02:00
osdep.h os: Return BadLength instead of disconnecting BigReq clients (#4565) 2010-09-28 18:47:08 -07:00
osinit.c Turn sprintf argument into literaral string, shutting up gcc warning 2010-05-13 04:53:57 +07:00
rpcauth.c Replace X-allocation functions with their C89 counterparts 2010-05-13 00:22:37 +07:00
strcasecmp.c Remove unnecessary parentheses around return values in functions 2010-06-10 06:42:42 -07:00
strcasestr.c Remove unnecessary parentheses around return values in functions 2010-06-10 06:42:42 -07:00
strlcat.c os: include dix-config.h, not xorg-config.h 2010-11-13 12:10:37 -08:00
strlcpy.c os: include dix-config.h, not xorg-config.h 2010-11-13 12:10:37 -08:00
utils.c Fix CVE-2011-4029: File permission change vulnerability. 2011-10-29 19:09:07 +02:00
WaitFor.c Replace X-allocation functions with their C89 counterparts 2010-05-13 00:22:37 +07:00
xdmauth.c Replace deprecated bzero with memset 2010-06-06 15:07:27 +07:00
xdmcp.c Remove unnecessary parentheses around return values in functions 2010-06-10 06:42:42 -07:00
xprintf.c Use lowercase variant of XNFalloc and Xstrdup 2010-05-13 00:22:37 +07:00
xsha1.c Replace X-allocation functions with their C89 counterparts 2010-05-13 00:22:37 +07:00
xstrans.c Change HAVE_CONFIG_H to HAVE_DIX_CONFIG_H. 2005-07-03 12:16:29 +00:00