Olivier Fourdan b7c5685a26 xfixes: Check request length for SetClientDisconnectMode ... The handler of XFixesSetClientDisconnectMode does not check the client request length. A client could send a shorter request and read data from a former request. Fix the issue by checking the request size matches. CVE-2025-49177 This issue was discovered by Nils Emmerich <nemmerich@ernw.de> and reported by Julian Suleder via ERNW Vulnerability Disclosure. Fixes: e167299f6 - xfixes: Add ClientDisconnectMode Signed-off-by: Olivier Fourdan <ofourdan@redhat.com> Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net> (cherry picked from commit ab02fb96b1) Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2026>		2025-06-17 15:07:52 +02:00
..
cursor.c	Move sizeof to second argument in calloc calls	2024-08-06 10:00:59 +02:00
disconnect.c	xfixes: Check request length for SetClientDisconnectMode	2025-06-17 15:07:52 +02:00
meson.build	xfixes: Add ClientDisconnectMode	2021-06-07 17:28:05 +02:00
region.c	render: move private definitions out of picturestr.h	2024-03-03 22:54:16 +00:00
saveset.c	xfixes: unvalidated lengths (CVE-2017-12183)	2017-10-10 23:33:44 +02:00
select.c	dispatch: Mark swapped dispatch as _X_COLD	2017-03-01 10:16:20 -05:00
xfixes.c	Remove "All rights reserved" from Oracle copyright notices	2023-02-25 09:40:41 -08:00
xfixes.h	xfixes: Unexport xfixes.h	2015-07-08 16:40:58 -04:00
xfixesint.h	Remove "All rights reserved" from Oracle copyright notices	2023-02-25 09:40:41 -08:00