search for: rrchangeoutputproperty

http://bugs.freedesktop.org/show_bug.cgi?id=16624 Summary: invalid pointer past to RRChangeOutputProperty Product: xorg Version: git Platform: All OS/Version: All Status: NEW Severity: normal Priority: medium Component: Driver/nouveau AssignedTo: nouveau at lists.freedesktop.org ReportedBy: obiwan at mailmi...

..., backlight_range); + if (err != 0) + xf86DrvMsg(output->scrn->scrnIndex, X_ERROR, + "RRConfigureOutputProperty error, %d\n", + err); + + /* Set the current value of the backlight property */ + data = drmmode_output->backlight_active_level; + err = RRChangeOutputProperty(output->randr_output, + drmmode->backlight_atom, + XA_INTEGER, 32, PropModeReplace, + 1, &data, FALSE, TRUE); + if (err != 0) + xf86DrvMsg(output->scrn->scrnIndex, X_ERROR, + &q...

[PATCH 1/3] kms: Don't hardcode the output properties [PATCH 2/3] kms: Implement output->get_property when RandR1.3 is available. [PATCH 3/3] kms: Add TV-out support src/drmmode_display.c | 403 ++++++++++++++++++++++++++++++++----------------- 1 files changed, 261 insertions(+), 142 deletions(-)

...len(name), TRUE); + err = RRConfigureOutputProperty(output->randr_output, *atom, + FALSE, TRUE, immutable, + 2, atom_range); + if (err != 0) { + xf86DrvMsg(output->scrn->scrnIndex, X_ERROR, + "RRConfigureOutputProperty error, %d\n", err); + } + err = RRChangeOutputProperty(output->randr_output, *atom, + XA_INTEGER, 32, PropModeReplace, 1, &value, FALSE, TRUE); + if (err != 0) { + xf86DrvMsg(output->scrn->scrnIndex, X_ERROR, + "RRChangeOutputProperty error, %d\n", err); + } +} + +static void drmmode_output_create_resources(xf86Out...

...bconnector it to SVIDEO, it fails: -------------------------- wberrier at myth:~$ xrandr --output TV-1 --set subconnector SVIDEO X Error of failed request: BadValue (integer parameter out of range for operation) Major opcode of failed request: 149 (RANDR) Minor opcode of failed request: 13 (RRChangeOutputProperty) Value in failed request: 0x52 Serial number of failed request: 29 Current serial number in output stream: 30 -------------------------- It appears that other people on the net are also having this issue. I dug around the kernel nouveau/drm source and found where the default for COMPOSIT...

...server shutdown or when the last client disconnects. Note that this issue has not been fixed in a release yet due to some issues with the proposed fixes. ---------------------------------------------------------------------------- 1) CVE-2023-5367 X.Org server: OOB write in XIChangeDeviceProperty/RRChangeOutputProperty Introduced in: xorg-server-1.7.0 (2009) and xorg-server-1.4.0 (2007), respectively Fixed in: xorg-server-21.1.9 and xwayland-23.2.2 Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/541ab2ecd41d4d8689e71855d93e492bc5547...