What's Changed
- (release/25.0) xquartz: Replace assert() around side-effecting calls with unconditional error handling by @metux in #3608
- (release/25.0) rootless: Keep the screen pixmap header consistent with its allocation by @metux in #3607
- (release/25.0) rootless: Fix two region leaks by @metux in #3606
- (release/25.0) darwin: Set thread priorities to user interactive or user initiated as appropriate by @metux in #3605
- (release/25.0) xquartz: Stop drawing before handing a frame to xp_frame_draw() by @metux in #3604
- (release/25.0) fb: Don't widen the planemask over padding bits when ROOTLESS_SAFEALPHA is set by @metux in #3603
- (release/25.0) xf86: prevent passing NULL pointer as strcat() destination by @metux in #3602
- (release/25.0) xf86: prevent passing NULL pointer as strcpy destination by @metux in #3601
- (release/25.0) composite: Fix PanoramiX overlay window release by @metux in #3600
- (release/25.0) Xephyr: fix setting physical output size by @metux in #3599
- (release/25.0) kdrive/ephyr: Fix typo when checking for
EGL_KHR_platform_x11by @metux in #3598 - (release/25.0) randr: Set the legacy RandR size range to include rotations by @metux in #3597
- (release/25.0) kdrive: Don't fixup the cursor position twice in KdCursorOffScreen by @metux in #3596
- (release/25.0) security: fix buffer overflows in winprefs.c by @metux in #3580
- (release/25.0) security: fix insecure temporary file usage and command injection by @metux in #3579
- (release/25.0) mi: fix double-free/UAF in miDCInitialize() on miSpriteInitialize() failure by @metux in #3512
- (release/25.0) include: compiler.h: restore MIPS port I/O port access (12-year-old bug) by @metux in #3498
- (release/25.0) hw/xfree86/glamor_egl: do not link staticaly glx library by @metux in #3473
- (backport 25.0) xfree86: pad the DGA QueryModes reply name to its announced length by @metux in #3192
- (release/25.0) randr: fix heap overflow and size tracking in RRChangeProviderProperty by @metux in #3099
- (release/25.0) hw/xwin: Always set the X input focus to none when an X window loses focus by @metux in #2898
- (release/25.0) modesetting: single-size hw cursor + drmGetVersion NULL guard (backport of #3749 + #3752) by @metux in #3761
- (release/25.0) Xi: bound SwapLongs of resolution values to the request length (backport to 25.0) by @metux in #3792
- xkb: harden group counts against a keymap reporting none (backport of #3784/#3785/#3786) by @metux in #3796
- (release/25.0) Xi: byte-swap XIQueryDevice ScrollClass flags by @metux in #3803
- (release/25.0) RegionValidate: Fix double free of badreg->data on the error path by @metux in #3805
- xkb: Guard XkbAdjustGroup() against a keymap with no groups (backport of #3783) by @metux in #3810
- (release/25.0) miext: damage: use drawable pointer instead of list head pointer to avoid realloc() UAF by @metux in #3818
- (release/25.0) Fix use-after-free caused by duplicate glyphs in one glyphset by @metux in #3577
- (release/25.0) security: add integer overflow checks in allocation calculations by @metux in #3578
- (release/25.0) xquartz/GL: Log failures on the indirect GLX make-current path by @metux in #3343
- (release/25.0) modesetting: save cursor in master's sprite_priv instead of slave's by @metux in #3837
- modesetting: don't drop coalesced Present vblanks when re-arm fails (backport of #3516) by @metux in #3821
- (release/25.0) xnest: Check malloc return values in GCOps to avoid NULL dereferences by @metux in #3665
- (release/25.0) Xi: Guard against NULL event pointer by @metux in #3660
- (release/25.0) mi: guard against NULL event pointer by @metux in #3656
- (release/25.0) glx: zero-init xGLXQueryVersionReply to avoid leaking uninitialised bytes by @metux in #3238
- (release/25.0) glamor: guard calloc in glamor_link_glsl_prog (backport of #3750) by @metux in #3758
- (release/25.0) Xi: fix wrong/late NULL check on touch-class alloc in DeepCopyPointerClasses() by @metux in #3368
- (release/25.0) Xi: xiselectev: fix OOB read in ProcXISelectEvents' non-swapped path by @metux in #3250
- (release/25.0) render: filter: fix integer-overflow bypass of convolution size check by @metux in #3249
- (release/25.0) glx: fix DrawableGone use-after-free without rejecting duplicate drawables by @metux in #3335
- (release/25.0) Xext/namespace: fix potential NULL-pointer dereference in select_ns() by @metux in #3858
- render: free animated cursor timers on destruction by @CC-David-CC in #3863
- (release/25.0) modesetting: Fix use-after-free when aborting queued events by @metux in #3867
- (release/25.0) dix: dispatch: clear the client slot when NextAvailableClient() fails by @metux in #3929
- (release/25.0) dix: dispatch: return DestroySubwindows() errors from ProcDestroySubwindows by @metux in #3926
- (release/25.0) Xext: composite: take the pixmap reference before AddResource() on Xinerama by @metux in #3946
- (release/25.0) xquartz: fix regression due to unconditional usage of qos APIs by @metux in #3949
- (release/25.0) dix/window: Fix UnmapNotify and DestroyNotify order in DestroySubwindows by @metux in #3951
- backport-25.0: dix, Xi: remove spurious dereference when checking function pointers by @metux in #3965
- (release/25.0) Fix incorrect uses of GLAMOR_HAS_GBM by @metux in #4017
- (release/25.0) DPMS: Don't wake display from input when timeouts are disabled by @metux in #4018
- (release/25.0) os: Add busfault_set_jmp() for SIGBUS unwind by @metux in #4016
- (release/25.0) miext/sync: Handle SIGBUS from truncated shm fences by @metux in #4015
- (release/25.0) glamor: Restore
GetImageproc by @metux in #4014 - (release/25.0) modesetting: Fix RandR output leasing while TearFree is enabled. by @metux in #4013
- (release/25.0) glamor: Set
need_free_regionimmediately after pixman region allocation by @metux in #4012 - (release/25.0) glamor/glamor_egl: Add a fallback path to
glamor_gbm_bo_from_pixmap_internalby @metux in #4010 - (release/25.0) xkb: use ssize_t for XKM byte counts by @metux in #4008
- (release/25.0) xkb: NULL text pointer after free in _CheckSetDoodad error path by @metux in #4006
- (release/25.0) glamor: use highp for fill_pos UVs on GLES by @metux in #4011
- (release/25.0) xkb: allocate names->keys to MAP_LENGTH in XkbAllocNames by @metux in #4004
- (release/25.0) kdrive/ephyr: Report a dummy refresh rate through RandR to make proton >= 8 happy by @metux in #3991
- (release/25.0) glamor: size tmp_bits buffer for source coordinate range in upload_boxes by @metux in #3993
- (release/25.0) xfree86: don't make a failed GPU screen ScreenInit fatal by @metux in #3989
- (release/25.0) Xi: validate modifier values in ProcXIPassiveUngrabDevice by @metux in #4002
- (release/25.0) present: unlink notifies from window list in present_clear_window_notifies by @metux in #3999
- (release/25.0) xkb: widen size_syms, num_syms, size_acts, num_acts to unsigned int by @metux in #3998
- (release/25.0) xkb: fix CheckKeySyms overwriting request-range symsPerKey entries by @metux in #4003
- (release/25.0) glx: validate dataBytes against cmdlen in RenderLarge first request by @metux in #4001
- (release/25.0) dix: remove passive grabs referencing a device on removal by @metux in #3997
- (release/25.0) xkb: reject incomplete keymaps in GetKbdByName by @metux in #3996
- (release/25.0) Xi: clean up gesture sprite traces in WindowGone by @metux in #3995
- (release/25.0) glamor: size tmp_bits buffer for source coordinate range in upload_boxes by @metux in #3994
- (release/25.0) Xi: add bounds check for barrier events in input_constrain_cursor by @metux in #4000
- [backport-25.0] test/info: run display-info tests serialised to avoid display-number race by @metux in #4022
- backport Xi barrier fixes + os winsock fix to release/25.0 by @metux in #4038
Full Changelog: xlibre-xserver-25.0.0.25...xlibre-xserver-25.0.0.26