- always include dri3 support with dri option (can still use dri2)
- always include GLAMOR support with dri option
- enable xtrans file descriptor passing
- require mesa 11
- Bump PKGREVISION
GLAMOR is experimental OpenGL accelerated 2D graphics. It works with
xf86-video-ati and xf86-video-intel but must be explicitly enabled.
Sample configuration:
---8<---
# /usr/pkg/share/X11/xorg.conf.d/20-glamor.conf
Section "Module"
Load "dri2"
Load "glamoregl"
EndSection
Section "Device"
Identifier "radeon" # or intel
Driver "radeon" # or intel
Option "AccelMethod" "glamor"
EndSection
---8<---
This picks up a pile of fixes from master. Notable highlights:
- Fix for CVE-2015-3164 in Xwayland
- Fix int10 setup for vesa
- Fix regression in server-interpreted auth
- Fix fb setup on big-endian CPUs
- Build fix for for gcc5
Complete changelog:
Aaron Plattner (2):
xfree86: Fix xf86_check_platform_slot's handling of PCI
xfree86: Add GPU screens even if there are no active GDevs
Adam Jackson (1):
xserver 1.17.2
Adel Gadllah (1):
modesetting: Fix software cursor fallback
Alan Coopersmith (2):
Clear ListenTransConns entries in CloseWellKnownConnections
Accept x86_64 as well as i*86 for $host_cpu in Solaris on x86
Brent Collins (1):
shm: Fix xselinux resource initialization for xinerama pixmaps
Chris Wilson (2):
shm: Fix use-after-free in ShmDestroyPixmap
present: Copy unflip contents back to the Screen Pixmap
Colin Harrison (2):
os/xdmcp.c: Include Xtrans.h when building for WIN32
os/utils.c: Don't try to build os_move_fd() for WIN32
Dave Airlie (2):
os/access: fix regression in server interpreted auth
glamor: don't do render ops with matching source/dest (v2)
Dima Ryazanov (1):
xwayland: Implement smooth scrolling
Egbert Eich (6):
symbols: Fix sdksyms.sh to cope with gcc5
Xephyr: Don't crash when no command line argument is specified
Xephyr: Print default server display number if none is specified
Xephyr: Fix compile when debugging is enabled
Xephyr: Fix screen image draw for the non-Glamor & non-XHSM case
Xephyr: Fix broken image when endianess of client machine and host-Xserver differ
Emil Velikov (2):
randr: remove chatty error messages
randr: use randr: prefix in ErrorF()
Hans de Goede (1):
Re-enable non serverfd input devices immediately on vtenter
Jason Gerecke (2):
xfree86: Return NULL from xf86CompatOutput if no compat_output is defined
dix: Do not allow device transform to be set on valuatorless devices
Jon TURNEY (9):
ephyr: Avoid a segfault with 'DISPLAY= Xephy -glamor'
os: XDMCP options like -query etc. should imply -listen tcp
os: Teach vpnprintf() how to handle "%*.*s"
hw/xwin/glx: Refactor parsing of the <proto> XML element
hw/xwin/glx: Improve code generator to deal with latest Khronos OpenGL registry XML
hw/xwin: Report Cygwin version information in log
glamor: Fix build when configured --enable-glamor --disable-xshmfence
hw/xwin/winclipboard: Link xwinclip with -lpthread
hw/xnest: Fix build for MinGW
Jonathan Gray (2):
glamor: remove const from the return type of glamor_get_drawable_location()
glamor: fix build when DRI3 is not defined
Jürg Billeter (1):
int10: Fix error check for pci_device_map_legacy
Keith Packard (1):
mi: Partial pie-slice filled arcs may need more space for spans
Maarten Lankhorst (4):
glamor: only use (un)pack_subimage when available
glamor: do not check for gl errors in glamor_build_program
glamor: Use GL_FRAMEBUFFER instead of GL_READ_FRAMEBUFFER
glamor: GL_TEXTURE_MAX_LEVEL is not available on GLES2
Michal Srb (1):
Expose GetMaster to modules.
Michel Dänzer (2):
Add AC_SYS_LARGEFILE defines to dix-config.h
modesetting: Include dix-config.h from dumb_bo.c
Olivier Fourdan (4):
ephyr: Fail if glamor is requested but not usable
xwayland: Add dependency on glamor libs
glamor: check max native ALU instructions
dix: Fix image byte order on big endian hardware
Ray Strode (5):
systemd-logind: filter out non-signal messages from message filter
systemd-logind: don't second guess D-Bus default timeout
xwayland: Enable access control on open sockets [CVE-2015-3164 1/3]
os: support new implicit local user access mode [CVE-2015-3164 2/3]
xwayland: default to local user if no xauth file given. [CVE-2015-3164 3/3]
Robert Ancell (1):
xwayland: Fix error strings
Rui Matos (2):
dix/events: Set currentTime to the given time stamp in NoticeTime
xwayland: Throttle our cursor surface updates with a frame callback
Vicente Olivert Riera (1):
backtrace.c: Fix word cast to a pointer
Switch if statment from a *BSD wildcard to specifically listing these operating
systems so FreeBSD & DragonFlyBSD can then use security/nettle.
Reviewed by wiz@
Please note that the previous version is still available in
x11/modular-xorg-server112 in case this version does not work for you.
This is relevant for users who need DRI1 and/or XAA as those features have
been deprecated and removed by upstream since xorg-server-1.13.
Note also that this update breaks the driver ABI and that drivers will be need
to be rebuilt.
Summary of the important changes since 1.12:
xorg-server-1.17 (4 February 2015)
- Generic DRM/KMS driver xf86-video-modesetting
xorg-server-1.16 (17 July 2014)
- XWayland DDX
- GLAMOR acceleration
- non-PCI devices support
- systemd-logind support (rootless X)
xorg-server1.15 (27 December 2013)
- DRI3
- "present" extension
xorg-server-1.14 (5 March 2013)
- XInput 2.3
xorg-server1.13 (5 September 2012)
- New DDX driver API
- DRI2
- RandR 1.4
- OpenGL 3.x+ contexts
- XAA support removed
need to link with it but might have included x11/xf86driproto's bl3.mk first,
because we have:
x11/xf86driproto/buildlink3.mk:BUILDLINK_DEPMETHOD.libpciaccess?= build
(This issue appears only on non-x86 because on x86 we get libpciaccess
through libdrm)
Bump PKGREVISION to get the dependency expressed.
of fonts required to run the X server.
AIUI we do not want the X server package to depend on these fonts
directly. (If this is not the case, or no longer is, they should be
added to DEPENDS.)
X.Org Security Advisory: Dec. 9, 2014
Protocol handling issues in X Window System servers
using the 1.16.x patches, backported to 1.12 by myself.
Review welcome.
Bump PKGREVISION.
From a4d9bf1259ad28f54b6d59a480b2009cc89ca623 Mon Sep 17 00:00:00 2001
From: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Mon, 16 Sep 2013 21:47:16 -0700
Subject: [PATCH] Avoid use-after-free in dix/dixfonts.c: doImageText()
Save a pointer to the passed in closure structure before copying it
and overwriting the *c pointer to point to our copy instead of the
original. If we hit an error, once we free(c), reset c to point to
the original structure before jumping to the cleanup code that
references *c.
Since one of the errors being checked for is whether the server was
able to malloc(c->nChars * itemSize), the client can potentially pass
a number of characters chosen to cause the malloc to fail and the
error path to be taken, resulting in the read from freed memory.
Since the memory is accessed almost immediately afterwards, and the
X server is mostly single threaded, the odds of the free memory having
invalid contents are low with most malloc implementations when not using
memory debugging features, but some allocators will definitely overwrite
the memory there, leading to a likely crash.
Reported-by: Pedro Ribeiro <pedrib@gmail.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Julien Cristau <jcristau@debian.org>
Bump PKGREVISION.
to address issues with NetBSD-6(and earlier)'s fontconfig not being
new enough for pango.
While doing that, also bump freetype2 dependency to current pkgsrc
version.
Suggested by tron in PR 47882
are only a handful of changes in this dot release, and with the pending
release of 1.13 next month, it's likely that this may be the final scheduled
release from the 1.12 branch; we will likely put out additional releases
from this branch, but they will no longer follow the standard 6-week
development cycle.
This version is identical to the previous release candidate except for
version numbers.
== Known Issues ==
Currently open bugs the 1.12 Tracker:
https://bugs.freedesktop.org/show_bug.cgi?id=xserver-1.12
23938: keys occasionally get stuck with xorg-server 1.6.99.901
http://bugs.freedesktop.org/23938
31501: crash accessing font info with xfs in fontpath
http://bugs.freedesktop.org/31501
39094: WaitFor does not handle EIO (causes 100% cpu load)
http://bugs.freedesktop.org/39094
39383: X server crashes when restarting KDE from Alt+F2
http://bugs.freedesktop.org/39383
39949: RandR panning & scaling don't work
http://bugs.freedesktop.org/39949
43988: crtc->desiredMode.name can point to freed memory.
http://bugs.freedesktop.org/43988
44038: some 3D wine apps no longer work (bisected)
http://bugs.freedesktop.org/44038
45445: Key press crashes the xserver when kdm is running
http://bugs.freedesktop.org/45445
49170: crash when starting or after some time of using psi
http://bugs.freedesktop.org/49170
50641: xorg-server-1.12.0 - When SELinux is enabled the xserver fails
http://bugs.freedesktop.org/50641
== New Issues ==
If you encounter an issue that you think should block a future 1.12
release,
please follow the instructions listed in the wiki to raise this to our
attention.
http://www.x.org/wiki/Server112Branch
== Changes since 1.12.3 ==
Aaron Plattner (1):
randr: Fix REQUEST vs. REQUEST_SIZE_MATCH mismatch
Adam Jackson (3):
ephyr: Fix up some bizarre formatting
randr: Fix up yet another corner case in preferred mode selection
sync: Fix logic error from b55bf248581dc66321b24b29f199f6dc8d02db1b
Alan Coopersmith (10):
OtherClientGone: Remove unreachable return statement
Fix some overly indented/poorly line wrapped comments in dix/events.c
Remove obsolete tab stop comments from hw/xfree86/parser/*.c
ProcRRGetScreenInfo: swap configTimestamp as well
xf86dga2.c & xf86vmode.c: Move REQUEST_SIZE_MATCH checks before using stuff
Use calloc to zero fill buffers being allocated for replies & events
Set padding bytes to 0 in WriteToClient
Initialize padding bits to 0 in ErrorConnMax()
Fix up formatting of initializers for arrays of structs
Make indentation of dix/tables.c much more consistent and readable
Daniel Stone (5):
DRI2: Remove prototype for DRI2DestroyDrawable
Don't make failure to -nolisten fatal
Xorg: Link XKB DDX library after core server libs
Xinerama: Fix ExtensionInit prototype
AllocDevicePair: Ensure XKB privates are initialised
Dave Airlie (2):
xf86: cursor code got mangled by indenting
kinput: allocate enough space for null character.
Jaroslav Šmíd (1):
Bug 51375: Xorg doesn't set status for RRGetOutputInfo
Jeremy Huddleston (3):
XQuartz: Silence an unused-variable warning
XQuartz: Fix incorrect PseudoramiXExtensionInit prototype
XQuartz: Call xp_window_bring_all_to_front if available in libXplugin
Jeremy Huddleston Sequoia (7):
XQuartz: Fix xp_window_bring_all_to_front linking on OS versions with older libXplugin
configure.ac: Version bump to 1.12.3.901 (1.12.4 RC1)
XQuartz: console_redirect: Set the correct location for reading into the buffer
XQuartz: console_redirect: Properly zero-out the tail of the array on realloc()
configure.ac: Version bump to 1.12.3.902 (1.12.4 RC2)
XQuartz: Bump version to 2.7.3
configure.ac: Version bump to 1.12.4
Jon TURNEY (1):
hw/xquartz: Various fixes for pseudoramiX.c
Julien Cristau (1):
Bump video ABI version to 12.1
Keith Packard (4):
randr: Clean up compiler warnings about unused and shadowing variables
randr: Catch two more potential unset rrScrPriv uses
Add 'install-headers' target in the top-level Makefile
Only free Render filter names on last screen close
Michal Srb (1):
Look for ModuleData only in appropriate library
Michel Dänzer (2):
dri2: Add DRI2CreateDrawable2.
glx: Free DRI2 drawable reference to destroyed GLX drawable.
Peter Hutterer (4):
xkb: use local variable instead of casting arg
dix: fix dereference before null check
list.h: don't crash when removing an element from a NULL list
dix: make sure the mask is set for emulated scroll events (#52508)
Ricardo Salveti de Araujo (1):
randr: first check pScrPriv before using the pointer at RRFirstOutput
Simon Schubert (1):
fb: reorder Bresenham error correction to avoid overshoot.
Vic Lee (1):
ephyr: Resize screen automatically when parent window is resized
git tag: xorg-server-1.12.4
use O_NOFOLLOW to open the existing lock file, so symbolic links
aren't followed, thus avoid revealing if it point to an existing
file. Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Fix CVE-2011-4029: File permission change vulnerability.
Use fchmod() to change permissions of the lock file instead of
chmod(), thus avoid the race that can be exploited to set a symbolic
link to any file or directory in the system. Signed-off-by: Matthieu
Herrb <matthieu.herrb@laas.fr> Reviewed-by: Alan Coopersmith
<alan.coopersmith@oracle.com>
