As Julien pointed out, Daniel's logging fixes fix CVE-2012-2118. The other two fixes are for the XIQueryPointer return values to be protocol-correct (i.e. send logical, not physical button state).
The following changes since commit 90299556db24543bb7365e8c2897deca3aa219e7:
dix: when disabling a device, release all buttons and keys (2012-05-03
11:24:44 +1000)
are available in the git repository at:
git://people.freedesktop.org/~whot/xserver server-1.12-branch
for you to fetch changes up to dab90b60f3b2ebfd8df4fa761f3f34859250f4db:
Report touch emulated buttons in XIQueryPointer for XI 2.1 and earlier
(2012-05-14 15:54:26 +1000)
----------------------------------------------------------------
Chase Douglas (2):
Report logical button state in ProcXIQueryPointer
Report touch emulated buttons in XIQueryPointer for XI 2.1 and earlier
Daniel Kurtz (4):
os/log: trivial cleanups
os/xprintf: add Xvscnprintf and Xscnprintf
os/log: only write timestamp if a message is actually written to logfile
os/log: refactor logging
Xi/xiquerypointer.c | 25 ++++++++----
include/Xprintf.h | 12 ++++++
os/log.c | 105 ++++++++++++++++++++++++---------------------------
os/xprintf.c | 44 +++++++++++++++++++++
4 files changed, 123 insertions(+), 63 deletions(-)
pgp357j68ooHQ.pgp
Description: PGP signature
_______________________________________________ [email protected]: X.Org development Archives: http://lists.x.org/archives/xorg-devel Info: http://lists.x.org/mailman/listinfo/xorg-devel
