With LLVM 19 setting attributes to enable BTI and PAC at the module level
no longer has the desired effect. Instead we have to set attributes on
each function in the module. Fixes software rendering with LLVM on
machines with BTI.
ok jsg@, mbuhl@
Merge fixes from upstream for multiple Xserver issues:
CVE-2025-49175: Out-of-bounds access in X Rendering extension
(Animated cursors)
CVE-2025-49176: Integer overflow in Big Requests Extension
CVE-2025-49177: Data leak in XFIXES Extension 6
(XFixesSetClientDisconnectMode)
CVE-2025-49178: Unprocessed client request via bytes to ignore
CVE-2025-49179: Integer overflow in X Record extension
CVE-2025-49180: Integer overflow in RandR extension
(RRChangeProviderProperty)
from matthieu@
this is errata/7.7/006_xserver.patch
Merge fixes from upstream for multiple Xserver issues:
CVE-2025-49175: Out-of-bounds access in X Rendering extension
(Animated cursors)
CVE-2025-49176: Integer overflow in Big Requests Extension
CVE-2025-49177: Data leak in XFIXES Extension 6
(XFixesSetClientDisconnectMode)
CVE-2025-49178: Unprocessed client request via bytes to ignore
CVE-2025-49179: Integer overflow in X Record extension
CVE-2025-49180: Integer overflow in RandR extension
(RRChangeProviderProperty)
from matthieu@
this is errata/7.6/019_xserver.patch
Merge fixes from upstream for multiple Xserver issues:
CVE-2025-49175: Out-of-bounds access in X Rendering extension
(Animated cursors)
CVE-2025-49176: Integer overflow in Big Requests Extension
CVE-2025-49177: Data leak in XFIXES Extension 6
(XFixesSetClientDisconnectMode)
CVE-2025-49178: Unprocessed client request via bytes to ignore
CVE-2025-49179: Integer overflow in X Record extension
CVE-2025-49180: Integer overflow in RandR extension
(RRChangeProviderProperty)
Update to xterm 399. tested by kirill@
Also reduce the diffs between the generated xtermcfg.h when using
configure and the one we provide for the BSD makefile. The file after
this diff matches the result of configure with :
configure --enable-backarrow-is-erase \
--enable-delete-is-del --enable-initial-erase \
--disable-tek4014 --with-terminal-id=vt100 \
--enable-broken-st --disable-exec-selection \
--disable-sixel-graphics --enable-initial-erase \
--disable-paste64 --disable-readline-mouse \
--disable-screen-dumps \
--disable-tcap-fkeys --disable-tcap-query \
--with-utmp-setgid
Backport TearFree page flips for the modesetting driver from X.Org maaster.
Work done by jcs@ and naddy@. This is the TearFree code alone as of
2023-12-17.
remove unused u_printf_length.c
u_printf_length() was moved from u_printf.cpp to avoid a problem with
unused c++ sections with ld.bfd.
Since then, upstream changed u_printf.cpp to u_printf.c and this problem
no longer exists.
Backport TearFree page flips for the modesetting driver from X.Org maaster.
Work done by tedu@ based on previous diffs by jcs@ and stsp@.
One bug fix in master by me. tested and ok tb@. commit on behalf of tedu@
add back linking of libm and libpthread
matches how meson links libgbm.so, though there the resulting
library did not have NEEDED entries for libm and libpthread
patch from jca@, tb@ confirms this unbreaks webkitgtk4 ports build
Add ac_cv_lib_lex=-lfl to the prebuilt cache.
Recent autoconf assume that if ac_cv_prog_LEX is set in the cache,
the lib is also defined in the cache. Needed by upcoming twm update.