CVS commit: [netbsd-6-1] xsrc/external/mit

["Manuel Bouyer" <bouyer%netbsd.org@localhost>]

Module Name:    xsrc
Committed By:   bouyer
Date:           Wed Oct  5 10:47:35 UTC 2016

Modified Files:
        xsrc/external/mit/libX11/dist/include/X11 [netbsd-6-1]: Xlibint.h
        xsrc/external/mit/libX11/dist/src [netbsd-6-1]: FontNames.c GetImage.c
            ListExt.c ModMap.c
        xsrc/external/mit/libXfixes/dist/src [netbsd-6-1]: Region.c
        xsrc/external/mit/libXi/dist/src [netbsd-6-1]: XGMotion.c XGetBMap.c
            XGetDCtl.c XGetFCtl.c XGetKMap.c XGetMMap.c XIQueryDevice.c
            XListDev.c XOpenDev.c XQueryDv.c
        xsrc/external/mit/libXrandr/dist/src [netbsd-6-1]: XrrConfig.c
            XrrCrtc.c XrrOutput.c XrrScreen.c
        xsrc/external/mit/libXrender/dist/src [netbsd-6-1]: Filter.c Xrender.c
        xsrc/external/mit/libXtst/dist/src [netbsd-6-1]: XRecord.c
        xsrc/external/mit/libXv/dist/src [netbsd-6-1]: Xv.c
        xsrc/external/mit/libXvMC/dist/src [netbsd-6-1]: XvMC.c

Log Message:
Apply patch, requested my mrg in ticket 1410:
        xsrc/external/mit/libX11/dist/include/X11/Xlibint.h     patch
        xsrc/external/mit/libX11/dist/src/FontNames.c           patch
        xsrc/external/mit/libX11/dist/src/GetImage.c            patch
        xsrc/external/mit/libX11/dist/src/ListExt.c             patch
        xsrc/external/mit/libX11/dist/src/ModMap.c              patch
        xsrc/external/mit/libXfixes/dist/src/Region.c           patch
        xsrc/external/mit/libXi/dist/src/XGMotion.c             patch
        xsrc/external/mit/libXi/dist/src/XGetBMap.c             patch
        xsrc/external/mit/libXi/dist/src/XGetDCtl.c             patch
        xsrc/external/mit/libXi/dist/src/XGetFCtl.c             patch
        xsrc/external/mit/libXi/dist/src/XGetKMap.c             patch
        xsrc/external/mit/libXi/dist/src/XGetMMap.c             patch
        xsrc/external/mit/libXi/dist/src/XIQueryDevice.c        patch
        xsrc/external/mit/libXi/dist/src/XListDev.c             patch
        xsrc/external/mit/libXi/dist/src/XOpenDev.c             patch
        xsrc/external/mit/libXi/dist/src/XQueryDv.c             patch
        xsrc/external/mit/libXrandr/dist/src/XrrConfig.c        patch
        xsrc/external/mit/libXrandr/dist/src/XrrCrtc.c          patch
        xsrc/external/mit/libXrandr/dist/src/XrrOutput.c        patch
        xsrc/external/mit/libXrandr/dist/src/XrrProvider.c      patch
        xsrc/external/mit/libXrandr/dist/src/XrrScreen.c        patch
        xsrc/external/mit/libXrender/dist/src/Filter.c          patch
        xsrc/external/mit/libXrender/dist/src/Xrender.c         patch
        xsrc/external/mit/libXtst/dist/src/XRecord.c            patch
        xsrc/external/mit/libXv/dist/src/Xv.c                   patch
        xsrc/external/mit/libXvMC/dist/src/XvMC.c               patch

Fix (backported from upstream) the following issues in X client
libraries:
libX11 - insufficient validation of data from the X server
         can cause out of boundary memory read (XGetImage())
         or write (XListFonts()).
         Affected versions libX11 <= 1.6.3

libXfixes - insufficient validation of data from the X server
        can cause an integer overflow on 32 bit architectures.
        Affected versions : libXfixes <= 5.0.2

libXi - insufficient validation of data from the X server
        can cause out of boundary memory access or
        endless loops (Denial of Service).
        Affected versions libXi <= 1.7.6

libXrandr - insufficient validation of data from the X server
        can cause out of boundary memory writes.
        Affected versions: libXrandr <= 1.5.0

libXrender - insufficient validation of data from the X server
        can cause out of boundary memory writes.
        Affected version: libXrender <= 0.9.9

XRecord - insufficient validation of data from the X server
        can cause out of boundary memory access or
        endless loops (Denial of Service).
         Affected version libXtst <= 1.2.2

libXv - insufficient validation of data from the X server
        can cause out of boundary memory and memory corruption.
        CVE-2016-5407
        affected versions libXv <= 1.0.10

libXvMC - insufficient validation of data from the X server
        can cause a one byte buffer read underrun.
        Affected versions: libXvMC <= 1.0.9


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.7.6.1 -r1.1.1.7.6.2 \
    xsrc/external/mit/libX11/dist/include/X11/Xlibint.h
cvs rdiff -u -r1.1.1.4.6.1 -r1.1.1.4.6.2 \
    xsrc/external/mit/libX11/dist/src/FontNames.c \
    xsrc/external/mit/libX11/dist/src/GetImage.c \
    xsrc/external/mit/libX11/dist/src/ModMap.c
cvs rdiff -u -r1.1.1.3.6.1 -r1.1.1.3.6.2 \
    xsrc/external/mit/libX11/dist/src/ListExt.c
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.6.1 \
    xsrc/external/mit/libXfixes/dist/src/Region.c
cvs rdiff -u -r1.1.1.3.6.1 -r1.1.1.3.6.2 \
    xsrc/external/mit/libXi/dist/src/XGMotion.c \
    xsrc/external/mit/libXi/dist/src/XGetFCtl.c \
    xsrc/external/mit/libXi/dist/src/XListDev.c \
    xsrc/external/mit/libXi/dist/src/XQueryDv.c
cvs rdiff -u -r1.1.1.2.6.1 -r1.1.1.2.6.2 \
    xsrc/external/mit/libXi/dist/src/XGetBMap.c
cvs rdiff -u -r1.1.1.4.6.1 -r1.1.1.4.6.2 \
    xsrc/external/mit/libXi/dist/src/XGetDCtl.c
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.6.1 \
    xsrc/external/mit/libXi/dist/src/XGetKMap.c \
    xsrc/external/mit/libXi/dist/src/XGetMMap.c \
    xsrc/external/mit/libXi/dist/src/XIQueryDevice.c \
    xsrc/external/mit/libXi/dist/src/XOpenDev.c
cvs rdiff -u -r1.1.1.3 -r1.1.1.3.6.1 \
    xsrc/external/mit/libXrandr/dist/src/XrrConfig.c \
    xsrc/external/mit/libXrandr/dist/src/XrrCrtc.c
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.6.1 \
    xsrc/external/mit/libXrandr/dist/src/XrrOutput.c \
    xsrc/external/mit/libXrandr/dist/src/XrrScreen.c
cvs rdiff -u -r1.1.1.3.6.1 -r1.1.1.3.6.2 \
    xsrc/external/mit/libXrender/dist/src/Filter.c
cvs rdiff -u -r1.1.1.2.6.1 -r1.1.1.2.6.2 \
    xsrc/external/mit/libXrender/dist/src/Xrender.c
cvs rdiff -u -r1.1.1.3 -r1.1.1.3.6.1 \
    xsrc/external/mit/libXtst/dist/src/XRecord.c
cvs rdiff -u -r1.1.1.2.6.1 -r1.1.1.2.6.2 \
    xsrc/external/mit/libXv/dist/src/Xv.c
cvs rdiff -u -r1.1.1.2.6.1 -r1.1.1.2.6.2 \
    xsrc/external/mit/libXvMC/dist/src/XvMC.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.