Timo Aaltonen pushed to branch debian-unstable at X Strike Force / lib / libx11


Commits:
178c4fef by Benno Schulenberg at 2023-06-16T09:40:19+02:00
nls: remove three duplicated combining acute accents

For the Cyrillic YU with combining acute accent, the string between
the quotes contained two U+0301 code points, whereas one is enough,
like for all the neighboring strings.

(This duplication was found by accident with `nano --mini --cons`.)

- - - - -
93391248 by Benno Schulenberg at 2023-06-24T10:03:29+02:00
nls: order a few compose sequences left first, and in mirroring pairs

- - - - -
ab0442d3 by Benno Schulenberg at 2023-06-24T10:21:29+02:00
nls: remove four unobvious and redundant compose sequences for ¥ (yen)

Composing ¥ with Y and a minus sign seems to have been added in analogy
to composing £ with L and a minus sign.  But ¥ clearly has a double line
through it, so using the equals sign for this is far more logical (and
those compose sequences of course exist).  Also, L plus an equals sign
produces ₤ (lira), not £ (sterling).  So... make these sequences more
consistent and allow composing ¥ only with Y/y plus an equals sign.

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
af2b6dfa by Benno Schulenberg at 2023-06-25T09:23:48+02:00
nls: delete twenty eight compose sequences that cannot be typed

The letters `Ǫ` (U+01EA, O with ogonek), `Ȩ` (U+0228, E with cedilla),
`Ȯ` (U+022E, O with dot above), `Ạ` (U+1EA0, A with dot below), and
their lowercase forms do not occur in any layout of xkeyboard-config,
meaning that the compose sequences that contained these letters could
not be typed.  Delete their dead weight.

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
e45dff5c by jmcwilliams403 at 2023-07-08T06:41:35+00:00
NLS: Drop two math sequences, slightly clean up APL sequences.

* Two compose sequences containing `leftshoe` and `rightshoe` are
dropped as no keyboard layout uses these keysyms.
* The compose sequences for `therefore` and `because` in the APL
block are moved to ascending Unicode order.
* The comments for the compose sequences for `U2299` are corrected to
more accurately reflect its sequence nodes and its real name in
Unicode.

- - - - -
b2c3fb7b by Benno Schulenberg at 2023-07-13T21:12:24+00:00
nls: use the shorter and more consistent name for the dead capital schwa

The `dead_SCHWA` name is available since xorgproto-2023.1, which was
released last month.

- - - - -
f90e6bfa by Walter Harms at 2023-08-13T22:42:50+02:00
rm XkbSetBounceKeysDelay.man

there is no function XkbSetBounceKeysDelay().
It is listed in the specs but never implemented if someone
does it, feel free to get the file back.

closes issue #105

- - - - -
757ab5dd by Alan Coopersmith at 2023-08-14T08:45:01-07:00
Remove XkbSetBounceKeysDelay.man from list of man pages to build

Fixes: f90e6bfa ("rm XkbSetBounceKeysDelay.man")

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
2a57c32e by Benno Schulenberg at 2023-08-17T16:30:23+02:00
nls: harmonize the comments for compose sequences with combining accents

Replace the "WITH" with "plus" and lowercase the 
"AND" in the comments
for sequences with combining accents, to make it slightly clearer that
the resulting string consists of multiple code points.  Also, use the
word "COMBINING" in the names of the accents, so that these sequences
can be easily grepped, and drop the redundant word "ACCENT".

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
70f44d76 by Benno Schulenberg at 2023-08-17T16:44:16+02:00
nls: add, correct, and normalize some comments of compose sequences

Add comments for the Khmer digraphs, correct the comments for the
Arabic lam-alef decompositions, and normalize the comments for the
Breton digraphs and trigraphs.

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
188991fe by G. Branden Robinson at 2023-08-19T12:54:26-07:00
configure script reports stray, confusing "yes"

Closes issue #194

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
2686dd7a by Alan Coopersmith at 2023-08-20T12:41:42-07:00
docs: finish removing XkbGetBounceKeysDelay & XkbSetBounceKeysDelay

These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
843e89bd by Alan Coopersmith at 2023-08-20T12:58:47-07:00
docs: remove XkbAllocDeviceLedInfo

This function was documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
caab7321 by Alan Coopersmith at 2023-08-20T14:04:15-07:00
docs: remove XkbGetAccessXTimeout & XkbSetAccessXTimeout

These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
bf13f197 by Alan Coopersmith at 2023-08-20T14:09:35-07:00
docs: remove XkbGetSlowKeysDelay & XkbSetSlowKeysDelay

These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
a1d8dd72 by Alan Coopersmith at 2023-08-20T14:18:32-07:00
docs: remove XkbGetStickyKeysOptions & XkbSetStickyKeysOptions

These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
b7a15d6c by Alan Coopersmith at 2023-08-20T14:31:20-07:00
docs: XkbSAActionSetCtrls is really named XkbActionSetCtrls

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
3442a8ce by Alan Coopersmith at 2023-08-20T15:27:13-07:00
docs: remove XkbChangeIndicators and Xkb{Get,Note}IndicatorChanges

These functions were documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
41a157df by Alan Coopersmith at 2023-08-20T15:27:48-07:00
docs: remove XkbGetNameChanges

This function was documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
7b16c550 by Alan Coopersmith at 2023-08-20T15:27:48-07:00
docs: remove XkbKeySymsOffset

This function was documented but never implemented.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
44f908d9 by Alan Coopersmith at 2023-08-20T15:27:48-07:00
docs: fix names for XkbKeyKeyType & XkbKeyKeyTypeIndex

Implementation had "Key" twice in these macro names,
but the docs had only listed it once.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
df2a18c4 by Benno Schulenberg at 2023-08-25T17:15:41+00:00
nls: delete twenty seven untypable Greek compose sequences

Only a few keyboard layouts contain the `dead_iota` keysym, and none
of those layouts contains the `acute` keysym, so compose sequences
that combine the two symbols cannot be typed and are thus useless.

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
031e6306 by Antti Savolainen at 2023-08-27T06:33:53+00:00
nls: add a compose sequence with double dead_tilde for ≈ (almost equal to)

Some keyboards lack direct asciitilde and instead have only dead tilde.
This compose sequence allows those keyboards to type the almost equal
to sign.

- - - - -
d9fe5dc7 by Benno Schulenberg at 2023-08-29T21:04:34+00:00
nls: change result of sequence `<C> <bar>` from `¢` (CENT) to `₵` 
(CEDI)

As a cent is a small coin, it makes no sense to use an uppercase letter
to compose the `¢` symbol -- having four sequences with a lowercase `c`
plus a `bar` or a `slash` available for composing `¢` should be enough.

Use the sequence `<C> <bar` (with the uppercase `C`) for composing `₵`
(the CEDI SIGN) instead.

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
c0e2d42d by Benno Schulenberg at 2023-08-29T21:04:34+00:00
nls: add compose sequences for `₲` (guaraní), `₭` (kip), and `₮` (tugrik)

When Ghana, Nigeria, Costa Rica and El Salvador have compose sequences
for their currency symbols (cedi: `₵`, naira: `₦`, colón: `₡`), then
Paraguay, Laos, and Mongolia deserve to have such sequences as well.

The sequences should be obvious: the relevant capital letter of the
name of the currency (G, K, T) plus a vertical bar, a minus sign,
and an equals sign, respectively.

Also add two sequences for `$` (the dollar sign), for consistency.

Drop the tentative comments for drachma, penny, and austral, as those
currencies have been obsolete for more than twenty years.

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
2ff401a4 by Benno Schulenberg at 2023-08-29T21:04:34+00:00
nls: reshuffle the compose sequences for currencies into ascending order

That is: sort them according to code point.

- - - - -
5433cb93 by Benno Schulenberg at 2023-08-29T21:04:34+00:00
nls: add two compose sequences for currency symbol `฿` (the Thai baht)

The compose sequences are obvious: the capital B plus the vertical bar.

Signed-off-by: Benno Schulenberg <bensb...@telfort.nl>

- - - - -
15bbc81c by Christopher Chavez at 2023-08-29T22:50:39+00:00
Xutil.h: use Bool for XEmptyRegion(), XEqualRegion()

- - - - -
3962080b by Antti Savolainen at 2023-09-09T13:53:16+00:00
Add two compose sequences for dagger/obelisk symbols

The dagger symbol has several modern uses such as marking someone as
dead or something as extinct. Historically it has been used to indicate
a footnote.

- - - - -
78b37acc by Alan Coopersmith at 2023-09-17T10:11:02-07:00
XOpenDisplay: ensure each screen has a valid root_visual pointer

Other code assumes this pointer cannot be NULL, so fail the connection
if a bug has caused the X server to give a non-existent visual ID for
the default visual of any screen.

Reported-by: Gregory James DUCK <gjd...@gmail.com>
Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
6858d468 by Alan Coopersmith at 2023-09-22T14:50:34-07:00
CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()

Make sure we allocate enough memory in the first place, and
also handle error returns from _XkbReadBufferCopyKeySyms() when
it detects out-of-bounds issues.

Reported-by: Gregory James DUCK <gjd...@gmail.com>
Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
204c3393 by Alan Coopersmith at 2023-09-22T15:12:03-07:00
CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage()

When splitting a single line of pixels into chunks to send to the
X server, be sure to take into account the number of bits per pixel,
so we don't just loop forever trying to send more pixels than fit in
the given request size and not breaking them down into a small enough
chunk to fix.

Fixes: "almost complete rewrite" (Dec. 12, 1987) from X11R2
Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
73a37d5f by Alan Coopersmith at 2023-09-22T15:12:38-07:00
XPutImage: clip images to maximum height & width allowed by protocol

The PutImage request specifies height & width of the image as CARD16
(unsigned 16-bit integer), same as the maximum dimensions of an X11
Drawable, which the image is being copied to.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
b4031fc0 by Alan Coopersmith at 2023-09-22T15:12:38-07:00
XCreatePixmap: trigger BadValue error for out-of-range dimensions

The CreatePixmap request specifies height & width of the image as CARD16
(unsigned 16-bit integer), so if either is larger than that, set it to 0
so the X server returns a BadValue error as the protocol requires.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
7916869d by Yair Mizrahi at 2023-09-22T15:15:34-07:00
CVE-2023-43787: Integer overflow in XCreateImage() leading to a heap overflow

When the format is `Pixmap` it calculates the size of the image data as:
    ROUNDUP((bits_per_pixel * width), image->bitmap_pad);
There is no validation on the `width` of the image, and so this
calculation exceeds the capacity of a 4-byte integer, causing an overflow.

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
c745719e by Alan Coopersmith at 2023-10-03T09:00:01-07:00
libX11 1.8.7

Signed-off-by: Alan Coopersmith <alan.coopersm...@oracle.com>

- - - - -
af1099f2 by Timo Aaltonen at 2023-10-04T13:10:35+03:00
Merge branch 'upstream-unstable' into debian-unstable

- - - - -
ad001739 by Timo Aaltonen at 2023-10-04T13:10:58+03:00
version bump

- - - - -
27459f11 by Timo Aaltonen at 2023-10-04T14:10:49+03:00
release to sid

- - - - -


24 changed files:

- README.md
- configure.ac
- debian/changelog
- include/X11/Xutil.h
- man/xkb/Makefile.am
- man/xkb/XkbSAActionSetCtrls.man → man/xkb/XkbActionSetCtrls.man
- man/xkb/XkbAllocDeviceInfo.man
- − man/xkb/XkbAllocDeviceLedInfo.man
- man/xkb/XkbChangeControls.man
- − man/xkb/XkbChangeIndicators.man
- − man/xkb/XkbGetAccessXTimeout.man
- − man/xkb/XkbGetBounceKeysDelay.man
- − man/xkb/XkbGetIndicatorChanges.man
- man/xkb/XkbGetKeyTypes.man
- − man/xkb/XkbGetNameChanges.man
- − man/xkb/XkbGetSlowKeysDelay.man
- − man/xkb/XkbGetStickyKeysOptions.man
- man/xkb/XkbKeyType.man → man/xkb/XkbKeyKeyType.man
- man/xkb/XkbKeyTypeIndex.man → man/xkb/XkbKeyKeyTypeIndex.man
- − man/xkb/XkbKeySymsOffset.man
- − man/xkb/XkbNoteIndicatorChanges.man
- − man/xkb/XkbSetAccessXTimeout.man
- − man/xkb/XkbSetBounceKeysDelay.man
- nls/am_ET.UTF-8/Compose.pre


The diff was not included because it is too large.


View it on GitLab: 
https://salsa.debian.org/xorg-team/lib/libx11/-/compare/70f654298df17e63f94b8e100954febffc54c8f3...27459f119d71a5c0eaa828fb234470766d4524e1

-- 
View it on GitLab: 
https://salsa.debian.org/xorg-team/lib/libx11/-/compare/70f654298df17e63f94b8e100954febffc54c8f3...27459f119d71a5c0eaa828fb234470766d4524e1
You're receiving this email because of your account on salsa.debian.org.


Reply via email to