xserver/Xext
Chris Wilson 64f81b80c7 xace: Invalid reference to out-of-scope data.
The callback data passed by reference to the hook was allocated on stack
within the scope of the case statement. The compiler is free to reuse
any of that stack space whilst making the function call so we may end up
passing garbage into the callback.

References:

  Bug 18451 - Xorg server 1.5.2 SEGV during XFixesGetCursorImage()
  https://bugs.freedesktop.org/show_bug.cgi?id=18451

v2: Drop the unrelated hunk that snuck in when ammending the commit
message.

Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Keith Packard <keithp@keithp.com>
(cherry picked from commit 6dae7f3792)
2010-09-04 11:38:54 -07:00
..
bigreq.c Xext: silence 'warning: no previous prototype' for sync, bigreq and xcmisc. 2009-09-21 09:17:56 +10:00
dpms.c Don't reset the lastDeviceEventTime when doing DPMS actions 2009-08-17 11:18:38 +10:00
dpmsproc.h DPMS: Remove unused DPMSGet() 2009-04-03 18:22:20 -04:00
dpmsstubs.c DPMS: Remove unused DPMSGet() 2009-04-03 18:22:20 -04:00
geext.c XGE: don't register an extension event 2010-04-15 11:09:43 +10:00
geext.h Xext: remove ev_fill from GEExtensions. 2009-03-20 15:17:54 +10:00
geint.h XGE: don't register an extension event 2010-04-15 11:09:43 +10:00
Makefile.am New header for XF86Bigfont server functions 2010-03-22 00:48:04 -05:00
mbuf.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
mbufbf.c Remove a bunch of useless casts. 2009-01-22 02:11:16 -05:00
mbufpx.c Remove a bunch of useless casts. 2009-01-22 02:11:16 -05:00
panoramiX.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
panoramiX.h Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
panoramiXh.h Centralize declaration of ConnectionInfo. 2008-08-20 13:14:34 -04:00
panoramiXprocs.c Xext: switch to byte counting functions 2009-07-14 10:14:01 +10:00
panoramiXsrv.h Rework symbol visibility for easier maintenance 2008-12-03 05:43:34 -02:00
panoramiXSwap.c Merge branch 'master' into mpx 2008-01-03 17:04:54 +10:30
saver.c Xext: Fix cursor reference counting hazard. 2010-03-22 10:34:35 -07:00
security.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
securitysrv.h Xext: include security protocol header instead of client header 2009-09-20 19:57:01 +10:00
shape.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
shm.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
shmint.h Update to xextproto 7.0.99.1. 2009-07-15 17:00:05 +10:00
sleepuntil.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
sleepuntil.h Remove RCS tags. Fix Xprint makefile braindamage. 2006-07-21 17:56:00 -04:00
sync.c Fix wrong bracket values when startOver = FALSE. 2010-05-18 14:43:40 +10:00
syncsrv.h Xext: silence 'warning: no previous prototype' for sync, bigreq and xcmisc. 2009-09-21 09:17:56 +10:00
xace.c xace: Invalid reference to out-of-scope data. 2010-09-04 11:38:54 -07:00
xace.h Correct outdated e-mail address in "Author" statements. 2009-09-02 17:56:52 -04:00
xacestr.h Correct outdated e-mail address in "Author" statements. 2009-09-02 17:56:52 -04:00
xcalibrate.c input: define server-supported protocol versions in one single file. 2009-09-21 21:47:35 +10:00
xcmisc.c Xext: silence 'warning: no previous prototype' for sync, bigreq and xcmisc. 2009-09-21 09:17:56 +10:00
xf86bigfont.c New header for XF86Bigfont server functions 2010-03-22 00:48:04 -05:00
xf86bigfontsrv.h New header for XF86Bigfont server functions 2010-03-22 00:48:04 -05:00
xres.c input: define server-supported protocol versions in one single file. 2009-09-21 21:47:35 +10:00
xselinux.h xselinux: Bump extension minor version. 2010-02-22 17:05:01 -05:00
xselinux_ext.c xselinux: Rename window-related requests that now support pixmaps. 2010-02-22 17:04:46 -05:00
xselinux_hooks.c xselinux: Remove reference counting calls for SID objects. 2010-02-22 17:04:33 -05:00
xselinux_label.c xselinux: Remove reference counting calls for SID objects. 2010-02-22 17:04:33 -05:00
xselinuxint.h xselinux: switch from x_device to separate x_pointer and x_keyboard classes. 2009-10-14 19:19:19 -04:00
xtest.c Xext: only update the sprite on pointer events. 2010-05-01 07:36:40 +10:00
xvdisp.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
xvdisp.h Fix swapped Xv dispatch under Xinerama. 2007-12-02 14:15:36 -05:00
xvdix.h Fix most remaining deprecated resource lookups. 2009-04-29 01:04:37 -04:00
xvmain.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
xvmc.c Add type name argument to CreateNewResourceType 2009-12-18 17:44:12 -08:00
xvmcext.h Use libtool convenience libraries and better "symbol" table. 2008-12-07 02:22:19 -02:00