940786ea6f
Changes in 1.7.2:
Only one minor change since the RC. Again, this release contains the fixes
for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
update.
Peter Hutterer (1):
libXi 1.7.2
Thomas Klausner (1):
Remove check that can never be true.
Changses in 1.7.1.901:
First and likely only RC for libXi 1.7.2. This one has a bunch of changes
for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
integer overflows and other corruption that happens if we trust the server
a bit too much on the data we're being sent.
On top of those fixes, the sequence number in XI2 events is now set
propertly too (#64687).
Please test, if you find any issues let me know.
Alan Coopersmith (14):
Expand comment on the memory vs. reply ordering in XIGetSelectedEvents()
Use _XEatDataWords to avoid overflow of rep.length bit shifting
Stack buffer overflow in XGetDeviceButtonMapping() [CVE-2013-1998 1/3]
memory corruption in _XIPassiveGrabDevice() [CVE-2013-1998 2/3]
unvalidated lengths in XQueryDeviceState() [CVE-2013-1998 3/3]
integer overflow in XGetDeviceControl() [CVE-2013-1984 1/8]
integer overflow in XGetFeedbackControl() [CVE-2013-1984 2/8]
integer overflow in XGetDeviceDontPropagateList() [CVE-2013-1984 3/8]
integer overflow in XGetDeviceMotionEvents() [CVE-2013-1984 4/8]
integer overflow in XIGetProperty() [CVE-2013-1984 5/8]
integer overflow in XIGetSelectedEvents() [CVE-2013-1984 6/8]
Avoid integer overflow in XGetDeviceProperties() [CVE-2013-1984 7/8]
Avoid integer overflow in XListInputDevices() [CVE-2013-1984 8/8]
sign extension issue in XListInputDevices() [CVE-2013-1995]
Peter Hutterer (7):
Copy the sequence number into the target event too (#64687)
Don't overwrite the cookies serial number
Fix potential corruption in mask_len handling
Change size += to size = in XGetDeviceControl
If the XGetDeviceDontPropagateList reply has an invalid length, return 0
Include limits.h to prevent build error: missing INT_MAX
libXi 1.7.1.901
45 lines
1.3 KiB
Makefile
45 lines
1.3 KiB
Makefile
# $NetBSD: Makefile,v 1.24 2013/07/03 06:27:03 wiz Exp $
|
|
|
|
DISTNAME= libXi-1.7.2
|
|
CATEGORIES= x11 devel
|
|
MASTER_SITES= ${MASTER_SITE_XORG:=lib/}
|
|
EXTRACT_SUFX= .tar.bz2
|
|
|
|
MAINTAINER= joerg@NetBSD.org
|
|
HOMEPAGE= http://xorg.freedesktop.org/
|
|
COMMENT= X Input extension library
|
|
LICENSE= mit
|
|
|
|
PKG_INSTALLATION_TYPES= overwrite pkgviews
|
|
|
|
USE_LIBTOOL= yes
|
|
GNU_CONFIGURE= yes
|
|
USE_TOOLS+= pkg-config
|
|
|
|
CONFIGURE_ENV+= LIB_MAN_SUFFIX=3 ac_cv_path_ASCIIDOC= ac_cv_path_XMLTO=
|
|
PKGCONFIG_OVERRIDE+= xi.pc.in
|
|
|
|
SUBST_CLASSES+= sosubdir
|
|
SUBST_STAGE.sosubdir= pre-configure
|
|
SUBST_FILES.sosubdir= man/*.man
|
|
SUBST_SED.sosubdir= -e 's|\.so X|.so manlibmansuffix/X|'
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
.if ${OPSYS} == "NetBSD"
|
|
CONFIGURE_ARGS+= --disable-malloc0returnsnull
|
|
.endif
|
|
|
|
BUILDLINK_API_DEPENDS.inputproto+= inputproto>=2.3
|
|
BUILDLINK_API_DEPENDS.libX11+= libX11>=1.5
|
|
BUILDLINK_API_DEPENDS.libXext+= libXext>=1.1
|
|
BUILDLINK_API_DEPENDS.xextproto+= xextproto>=7.0.3
|
|
BUILDLINK_API_DEPENDS.xproto+= xproto>=7.0.13
|
|
.include "../../x11/inputproto/buildlink3.mk"
|
|
.include "../../x11/libX11/buildlink3.mk"
|
|
.include "../../x11/libXext/buildlink3.mk"
|
|
.include "../../x11/libXfixes/buildlink3.mk"
|
|
.include "../../x11/xextproto/buildlink3.mk"
|
|
.include "../../x11/xproto/buildlink3.mk"
|
|
|
|
.include "../../mk/bsd.pkg.mk"
|