summaryrefslogtreecommitdiff
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* Fix spelling/wording issuesAlan Coopersmith2022-04-069-13/+13
* Fix out-of-bounds read in FontFileMakeDir()Alex Richardson2021-07-141-4/+1
* Fix use after free when font server connection lostPeter Harris2021-03-021-21/+19
* Fix crash when font server connection lostPeter Harris2020-03-061-10/+10
* Fix Win32 build since c4ed2e06 "Add some unit testing utilities"Jon Turney2019-10-252-0/+45
* fs_read_glyphs: check if rep is null before dereferencingAlan Coopersmith2019-08-171-1/+2
* CatalogueRescan: if opendir() fails, unref fpes, but don't free the catAlan Coopersmith2019-08-171-4/+2
* ComputeScaledProperties: check for valid pointers before making atomsAlan Coopersmith2019-08-171-2/+4
* stubs/atom.c: check for ResizeHashTable failureAlan Coopersmith2019-08-171-1/+3
* Fix whitespaceMaya Rashish2019-08-171-1/+1
* fontxlfd.c: tell gcc that switch fallthrough is intentionalAlan Coopersmith2019-08-041-0/+1
* Convert multiplying malloc calls to use mallocarray insteadAlan Coopersmith2019-08-0414-28/+39
* Convert multiplying realloc calls to use reallocarray insteadAlan Coopersmith2019-08-0310-12/+21
* Add reallocarray fallback if not provided by libc nor libbsdAlan Coopersmith2019-08-032-0/+53
* Use bounds checking string functions everywhereAlan Coopersmith2019-08-038-102/+131
* Add strlcat & strlcpy fallbacks if not provided by libc nor libbsdAlan Coopersmith2019-08-033-0/+158
* avoid -Wformat errors from clang when building with -DDEBUGRin Okuyama2018-03-241-16/+16
* Open files with O_NOFOLLOW. (CVE-2017-16611)Michal Srb2017-11-252-4/+26
* pcfGetProperties: Check string boundaries (CVE-2017-13722)Michal Srb2017-10-041-2/+11
* Check for end of string in PatternMatch (CVE-2017-13720)Michal Srb2017-10-041-1/+3
* freetype: Fix a logic error in computing face nameAdam Jackson2016-06-101-1/+0
* fserve: Fix a buffer read overrun in _fs_client_accessJeremy Huddleston Sequoia2016-05-301-3/+1
* fstrans: Remove unused foo() functionJeremy Huddleston Sequoia2016-05-301-2/+0
* fserve: Silence a -Wformat warningJeremy Huddleston Sequoia2016-05-291-2/+2
* bitmap: Bail out on invalid input to FontFileMakeDir instead of calling callo...Jeremy Huddleston Sequoia2016-05-291-0/+4
* FreeType: Correct an allocation sizeJeremy Huddleston Sequoia2016-05-291-1/+1
* Convert to non-recursive build.Matt Turner2015-12-099-202/+0
* Eliminate calls back to X server or font server functions by name (v4)libXfont2-2.0.0Keith Packard2015-12-0874-894/+672
* Add compiler warning flags and fix warningsKeith Packard2015-12-084-9/+10
* Use NO_WEAK_SYMBOLS instead of -flat_namespaceJeremy Huddleston Sequoia2015-10-211-10/+1
* stubs: Add missing externs for declarations in the NO_WEAK_SYMBOLS && PIC stu...Jeremy Huddleston Sequoia2015-10-211-23/+23
* Fix is*() usage.Thomas Klausner2015-10-204-11/+11
* bdfReadCharacters: Allow negative DWIDTH valuesBenjamin Tissoires2015-07-281-1/+1
* bdfReadCharacters: ensure metrics fit into xCharInfo struct [CVE-2015-1804]Alan Coopersmith2015-03-171-2/+24
* bdfReadCharacters: bailout if a char's bitmap cannot be read [CVE-2015-1803]Alan Coopersmith2015-03-171-1/+4
* bdfReadProperties: property count needs range check [CVE-2015-1802]Alan Coopersmith2015-03-171-1/+3
* Set close-on-exec for font file I/O.Christos Zoulas2015-02-262-6/+11
* Use 'imdent' to realign cpp indentation levels in fslibos.hAlan Coopersmith2014-11-051-109/+109
* Remove unneeded checks for #ifndef X_NOT_POSIXAlan Coopersmith2014-11-051-2/+0
* Make shared library work on Cygwin/MinGWYaakov Selkowitz2014-06-2725-28/+182
* Use default glyphs when getting 16-bit font with 8-bit textKeith Packard2014-05-231-1/+5
* Don't build unused code in bitmapfunc.c if all bitmap formats are disabledAlan Coopersmith2014-05-231-0/+15
* Don't compile bitmap source files for disabled formatsAlan Coopersmith2014-05-231-7/+17
* Drop imake/monolithic compatibility #define mappingAlan Coopersmith2014-05-232-32/+0
* CVE-2014-0210: unvalidated length fields in fs_read_list_info()Alan Coopersmith2014-05-121-0/+54
* CVE-2014-0210: unvalidated length fields in fs_read_list()Alan Coopersmith2014-05-121-0/+15
* CVE-2014-0210: unvalidated length fields in fs_read_glyphs()Alan Coopersmith2014-05-121-1/+28
* CVE-2014-0210: unvalidated length fields in fs_read_extent_info()Alan Coopersmith2014-05-121-0/+10
* CVE-2014-0211: integer overflow in fs_alloc_glyphs()Alan Coopersmith2014-05-121-1/+6
* CVE-2014-0211: integer overflow in fs_read_extent_info()Alan Coopersmith2014-05-121-1/+11