Olivier Fourdan 923837e2c9 xfree86: Check for RandR provider functions ...

Changing XRandR provider properties if the driver has set no provider
function such as the modesetting driver will cause a NULL pointer
dereference and a crash of the Xorg server.

Related to CVE-2025-49180

This issue was discovered by Nils Emmerich <nemmerich@ernw.de> and
reported by Julian Suleder via ERNW Vulnerability Disclosure.

Signed-off-by: Olivier Fourdan <ofourdan@redhat.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2024>

2025-06-17 20:01:25 +02:00

..

kdrive

ephyr: explicitly zero-initialize ephyrCursorScreen

2025-06-14 17:28:13 +02:00

vfb

Xi: unexport AssignTypeAndName()

2025-06-12 17:21:46 +02:00

xfree86

xfree86: Check for RandR provider functions

2025-06-17 20:01:25 +02:00

xnest

Xnest: implement a defined initialization order in BoxRec

2025-06-13 19:15:41 +02:00

xquartz

Rebrand 'X.Org X Server' to 'XLibre X Server'

2025-06-13 19:08:11 +02:00

xwin

xwin: fix NULL parameter in printf arguments

2025-06-12 17:21:47 +02:00

meson.build

drop Xwayland

2025-06-17 12:51:36 +02:00