| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| |
| | |
Otherwise the old length is preserved, which will result in NULL pointer
dereferencing if the parameter is ever accessed.
|
| |
| |
| |
| |
| | |
This is explicitly a byte sequence, so let's try to keep a consistent
typing.
|
| |
| |
| |
| |
| | |
These are used here and there so let's make them more general rather
than hiding them in the stream classes.
|
| |
| |
| |
| |
| | |
Avoid our own custom types in favour of what's already included with
C++.
|
| |
| |
| |
| |
| | |
Avoid having our own custom stuff and instead use the modern, standard
types, for familiarity.
|
| |
| |
| |
| |
| | |
Avoid preprocessor magic and instead rely on templating to generate
optimized functions for performance critical code.
|
|\ \ |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Addresses the following AVC denial:
type=PROCTITLE msg=audit(01/12/2023 02:58:12.648:696) : proctitle=/usr/sbin/vncsession fedora :1
type=PATH msg=audit(01/12/2023 02:58:12.648:696) : item=1 name=/home/fedora/.vnc nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
type=PATH msg=audit(01/12/2023 02:58:12.648:696) : item=0 name=/home/fedora/ inode=262145 dev=fc:02 mode=dir,700 ouid=fedora ogid=fedora rdev=00:00 obj=unconfined_u:object_r:user_home_dir_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
type=CWD msg=audit(01/12/2023 02:58:12.648:696) : cwd=/home/fedora
type=SYSCALL msg=audit(01/12/2023 02:58:12.648:696) : arch=x86_64 syscall=mkdir success=no exit=EACCES(Permission denied) a0=0x7fff47d52540 a1=0755 a2=0x0 a3=0x0 items=2 ppid=2869 pid=2880 auid=fedora uid=fedora gid=fedora euid=fedora suid=fedora fsuid=fedora egid=fedora sgid=fedora fsgid=fedora tty=(none) ses=8 comm=vncsession exe=/usr/sbin/vncsession subj=system_u:system_r:vnc_session_t:s0 key=(null)
type=AVC msg=audit(01/12/2023 02:58:12.648:696) : avc: denied { create } for pid=2880 comm=vncsession name=.vnc scontext=system_u:system_r:vnc_session_t:s0 tcontext=system_u:object_r:vnc_home_t:s0 tclass=dir permissive=0
Resolves: rhbz#2143704
|
|\ \ \
| | | |
| | | |
| | | | |
https://github.com/MarkMielke/tigervnc
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Clipboard functions may run on connections that are not yet at
RFBSTATE_NORMAL. Due to recent hardening of the accessCheck() function,
it is important to validate that the state is RFBSTATE_NORMAL before
calling accessCheck().
Fixes #1599.
|
| | |
| | |
| | |
| | |
| | |
| | | |
An assert will kill the entire server, which is overly harsh when there
is a problem with a single connection. Instead, throw an exception which
will just disconnect that specific client.
|
|/ / |
|
| |
| |
| |
| |
| | |
Make sure we don't send a bogus request to the X server in the (common)
case that we don't actually have anything to restore.
|
| | |
|
|/
|
|
|
| |
This should have been removed with the code using these defines in
03ca975.
|
|
|
|
| |
Everything else uses LF line endings, so fix up the few stray ones.
|
|\ |
|
| |
| |
| |
| |
| | |
We might not have all the necessary information, e.g. all targets might
not exist yet, until we're done going through all CMakeLists.
|
| |
| |
| |
| | |
They may be crucial, so refuse to continue if this happens.
|
| |
| |
| |
| |
| | |
This is what the linker does, so we should do the same for correct
behaviour.
|
| |
| |
| |
| |
| | |
Things might be in odd places, so make sure we respect where we're told
to look for libraries.
|
| |
| |
| |
| |
| |
| | |
We have internal dependencies that should be respected, as otherwise it
will be up to the user of the .la file to figure out the correct order
of the libraries.
|
| |
| |
| |
| |
| | |
I think this only affects macOS at the moment where they also have .tbd
files for linking.
|
| |
| |
| |
| |
| | |
We don't really use the .la files for macOS at the moment, but let's try
to be prepared.
|
| |
| |
| |
| |
| | |
This serves no useful purpose as we have no reason to suspect there will
be a dangerous first character in these variables.
|
| |
| |
| |
| |
| | |
Not sure how the old one ever worked as it incorrectly just tried to
match last character and nothing else.
|
| |
| |
| |
| |
| | |
<target>_LIB_DEPENDS is an internal variable that contains lots of other
weird stuff.
|
|/ |
|
|\ |
|
| |
| |
| |
| |
| |
| | |
These are supported by gcc and clang, and I don't think MSVC works well
with our code anyway, so let's keep things simple and use these
directly.
|
| |
| |
| |
| |
| |
| |
| |
| | |
These are also useful warnings that tend to find real bugs, so let's
enable then.
The downside is they require us to mark certain things so the compiler
knows if they were on purpose or not.
|
| |
| |
| |
| |
| | |
That warning doesn't play well with Windows' GetProcAddress(), so add
some extra casting to work around it.
|
| |
| |
| |
| |
| | |
This isn't needed with modern build environments, and can even conflict
with them.
|
| |
| |
| |
| | |
gcc will complain, and we will fill out all fields later anyway.
|
| |
| |
| |
| |
| | |
These types caused an incorrect signed/unsigned behaviour, so let's make
sure we use the appropriate type.
|
| |
| |
| |
| | |
gcc can get upset if they aren't in this order.
|
| |
| |
| |
| |
| | |
If we don't mark these as volatile then they might get reset on
longjmp() and the code will misbehave.
|
| |
| |
| |
| |
| | |
These are just values, so setting const on them has no effect as the
caller will get a copy.
|
| |
| |
| |
| | |
These are all truisms because of the valid range of the types.
|
| |
| |
| |
| |
| | |
This allows us to separate accidental fall through from explicit ones,
which allows us to turn on such checks in the compiler.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
If there isn't enough data, then the client reading the hash will fall
down and try to read the subtype instead, which isn't correct.
Invert the logic so we get a more consistent way through where we only
break out when there is insufficient data.
Do the same for the server code, for consistency.
|
| |
| |
| |
| |
| | |
These were not meant to fall through. Likely didn't have any adverse
effects, but let's fix it anyway.
|
| |
| |
| |
| |
| | |
This allows us to separate accidentally unused, from explicitly unused
parameters, which allows us to turn on such checks in the compiler.
|
| |
| |
| |
| |
| | |
No practical difference currently, but let's respect what this API was
supposed to do.
|
| | |
|
| |
| |
| |
| | |
They have no need for it, so let's simplify things.
|
| |
| |
| |
| | |
Everything in flags is already handled at a higher level.
|
| |
| |
| |
| | |
The flags should always be empty anyway.
|
| |
| |
| |
| |
| | |
This makes sure the compiler doesn't complain about problems in those
files.
|
| |
| |
| |
| |
| | |
It's only the -Werror part we want to be conditional on being debug
builds.
|