Displaying 3 results from an estimated 3 matches for "compredirectwindow".
2025 Feb 25
0
X.Org Security Advisory: multiple security issues X.Org X server and Xwayland
...evice based on
its device id and returns the matching value, or supposedly NULL if no
match was found.
    
However the code will return the last element of the list if no matching
device id was found which can lead to out of bounds memory access.
6) CVE-2025-26599: Use of uninitialized pointer in compRedirectWindow()
Introduced in: Xorg 6.8.0.
Fixed in: xorg-server-21.1.16 and xwayland-24.1.6
Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/c1ff84be
      https://gitlab.freedesktop.org/xorg/xserver/-/commit/b07192a8
Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative
The function...
2025 Feb 25
0
[ANNOUNCE] xwayland 24.1.6
...x xsync test
       Cursor: Refuse to free the root cursor
       xkb: Fix buffer overflow in XkbVModMaskText()
       xkb: Fix computation of XkbSizeKeySyms
       xkb: Fix buffer overflow in XkbChangeTypesOfKey()
       Xi: Fix barrier device search
       composite: Handle failure to redirect in compRedirectWindow()
       composite: initialize border clip even when pixmap alloc fails
       dix: Dequeue pending events on frozen device on removal
       sync: Do not let sync objects uninitialized
       sync: Check values before applying changes
       sync: Do not fail SyncAddTriggerToSyncObject()
       sy...
2025 Feb 25
0
[ANNOUNCE] xorg-server 21.1.16
...x xsync test
       Cursor: Refuse to free the root cursor
       xkb: Fix buffer overflow in XkbVModMaskText()
       xkb: Fix computation of XkbSizeKeySyms
       xkb: Fix buffer overflow in XkbChangeTypesOfKey()
       Xi: Fix barrier device search
       composite: Handle failure to redirect in compRedirectWindow()
       composite: initialize border clip even when pixmap alloc fails
       dix: Dequeue pending events on frozen device on removal
       sync: Do not let sync objects uninitialized
       sync: Check values before applying changes
       sync: Do not fail SyncAddTriggerToSyncObject()
       sy...