Fix debug build with LLVM for ILP32 archs.

merge libXcursor 1.1.15, libXfont 1.5.4 and libXfont2 2.0.3.

initial import of libXfont-1.5.4. this fixes CVE-2017-16611.

merge libXfont 1.5.2.

initial import of libXfont-1.5.2

appease clang -Wformat errors with MKDEBUG=yes

regen for libXfont 1.5.1.

merge Xfont 1.5.1.

initial import of libXfont-1.5.1

update for 1.5.0

merge libXfont-1.5.0

initial import of libXfont-1.5.0

Set close-on-exec for font file i/o.

merge libXfont 1.4.8.

initial import of libXfont-1.4.8

Fix multiple vulnerabilities in libXfont:

- CVE-2014-0209: integer overflow of allocations in font metadata file parsing

When a local user who is already authenticated to the X server adds
a new directory to the font path, the X server calls libXfont to open
the fonts.dir and fonts.alias files in that directory and add entries
to the font tables for every line in it. A large file (~2-4 gb) could
cause the allocations to overflow, and allow the remaining data read
from the file to overwrite other memory in the heap.

Affected functions: FontFileAddEntry(), lexAlias()

- CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies

When parsing replies received from the font server, these calls do not
check that the lengths and/or indexes returned by the font server are
within the size of the reply or the bounds of the memory allocated to
store the data, so could write past the bounds of allocated memory when
storing the returned data.

Affected functions: _fs_recv_conn_setup(), fs_read_open_font(),
fs_read_query_info(), fs_read_extent_info(), fs_read_glyphs(),
fs_read_list(), fs_read_list_info()

- CVE-2014-0211: integer overflows calculating memory needs for xfs replies

These calls do not check that their calculations for how much memory
is needed to handle the returned data have not overflowed, so can

result in allocating too little memory and then writing the returned
data past the end of the allocated buffer.

Affected functions: fs_get_reply(), fs_alloc_glyphs(),
fs_read_extent_info()

See also: http://lists.x.org/archives/xorg-announce/2014-May/002431.html

merge libXfont 1.4.7.

merge libSM 1.2.2, libXaw 1.0.12, libXfont 1.4.7, libXi 1.7.2,
libXmu 1.1.2, and libXpm 3.5.11 parts.

initial import of libXfont-1.4.7

Additional hardening from upstream:

From f8b21df399fbedd08da88752181b8a290a38d890 Mon Sep 17 00:00:00 2001
From: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Mon, 23 Dec 2013 19:01:11 -0800
Subject: [PATCH:libXfont 2/2] Limit additional sscanf strings to fit buffer
sizes

None of these could currently result in buffer overflow, as the input
and output buffers were the same size, but adding limits helps ensure
we keep it that way, if we ever resize any of these in the future.

Fixes cppcheck warnings:
[lib/libXfont/src/bitmap/bdfread.c:547]: (warning)
scanf without field width limits can crash with huge input data.
[lib/libXfont/src/bitmap/bdfread.c:553]: (warning)
scanf without field width limits can crash with huge input data.
[lib/libXfont/src/bitmap/bdfread.c:636]: (warning)
scanf without field width limits can crash with huge input data.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
---
src/bitmap/bdfread.c | 14 +++++++++++---
1 file changed, 11 insertions(+), 3 deletions(-)

CVS-2013-6462:
From aeabb3efa6905e11c479e2e5319f2b6b3ab22009 Mon Sep 17 00:00:00 2001
From: Alan Coopersmith <alan.coopersmith@oracle.com>
Date: Mon, 23 Dec 2013 18:34:02 -0800
Subject: [PATCH:libXfont 1/2] CVE-2013-XXXX: unlimited sscanf can overflow
stack buffer in bdfReadCharacters()

Fixes cppcheck warning:
[lib/libXfont/src/bitmap/bdfread.c:341]: (warning)
scanf without field width limits can crash with huge input data.

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
---
src/bitmap/bdfread.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

merge libXfont 1.4.5

initial import of libXfont-1.4.5

fix in libxfont:
An uninitialized pointer causes a crash if pcf header is corrupted
(upstream patch).

Do proper input validation. Allow decompressing all input streams.

P
Fix CVS-2011-2895, buffer overflow in decompress

Assume for a moment that the intention here is to do something useful.

merge libXfont 1.4.2.

initial import of libXfont-1.4.2

Regenerate to match current source
* PACKAGE_STRING, PACKAGE_VERSION, PACKAGE_VERSION_PATCHLEVEL and VERSION
updated for 1.4.1
* Commented entry added (HAVE_LIBWS2_32)
* LT_OBJDIR is now gone

initial import of libXfont-1.4.1

update these files to libXfont 1.4.0.

apply some HAVE_CONFIG_H

merge libXfont 1.4.0

initial import of libXfont-1.4.0

fix debugging build

fix debugging build.

fix debugging build

commit generated files; in many cases these aren't really needed
except the sources #include them unconditionally. fortunately
most of the modular xorg packages use #ifdef HAVE_CONFIG_H.

initial import of libXfont-1.3.2