commit 733f64bfeb311c1d040b2f751bfdef9c9d0f89ef
Author: Matthieu Herrb <matthieu@herrb.eu>
Date:   Tue Aug 21 16:54:50 2018 +0200

    libX11 1.6.6
    
    Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>

commit 173704243fbcbea0b6de2068b4fb403c7408fb54
Author: Matthieu Herrb <matthieu@herrb.eu>
Date:   Tue Aug 21 16:53:40 2018 +0200

    Remove statement with no effect.
    
    Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>

commit e83722768fd5c467ef61fa159e8c6278770b45c2
Author: Tobias Stoeckmann <tobias@stoeckmann.org>
Date:   Fri Jul 27 16:38:00 2018 +0200

    Fixed crash on invalid reply (CVE-2018-14598).
    
    If the server sends a reply in which even the first string would
    overflow the transmitted bytes, list[0] (or flist[0]) will be set to
    NULL and a count of 0 is returned.
    
    If the resulting list is freed with XFreeExtensionList or
    XFreeFontPath later on, the first Xfree call:
    
        Xfree (list[0]-1)
     turns into
        Xfree (NULL-1)
    
    which will most likely trigger a segmentation fault.
    
    I have modified the code to return NULL if the first string would
    overflow, thus protecting the freeing functions later on.
    
    Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>

commit dbf72805fd9d7b1846fe9a11b46f3994bfc27fea
Author: Tobias Stoeckmann <tobias@stoeckmann.org>
Date:   Fri Jul 27 16:37:17 2018 +0200

    Fixed out of boundary write (CVE-2018-14600).
    
    The length value is interpreted as signed char on many systems
    (depending on default signedness of char), which can lead to an out of
    boundary write up to 128 bytes in front of the allocated storage, but
    limited to NUL byte(s).
    
    Casting the length value to unsigned char fixes the problem and allows
    string values with up to 255 characters.
    
    Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>

commit b469da1430cdcee06e31c6251b83aede072a1ff0
Author: Tobias Stoeckmann <tobias@stoeckmann.org>
Date:   Fri Jul 27 16:36:34 2018 +0200

    Fixed off-by-one writes (CVE-2018-14599).
    
    The functions XGetFontPath, XListExtensions, and XListFonts are
    vulnerable to an off-by-one override on malicious server responses.
    
    The server replies consist of chunks consisting of a length byte
    followed by actual string, which is not NUL-terminated.
    
    While parsing the response, the length byte is overridden with '\0',
    thus the memory area can be used as storage of C strings later on. To
    be able to NUL-terminate the last string, the buffer is reserved with
    an additional byte of space.
    
    For a boundary check, the variable chend (end of ch) was introduced,
    pointing at the end of the buffer which ch initially points to.
    Unfortunately there is a difference in handling "the end of ch".
    
    While chend points at the first byte that must not be written to,
    the for-loop uses chend as the last byte that can be written to.
    
    Therefore, an off-by-one can occur.
    
    I have refactored the code so chend actually points to the last byte
    that can be written to without an out of boundary access. As it is not
    possible to achieve "ch + length < chend" and "ch + length + 1 > chend"
    with the corrected chend meaning, I removed the inner if-check.
    
    Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>

commit d81da209fd4d0c2c9ad0596a8078e58864479d0d
Author: Tobias Stoeckmann <tobias@stoeckmann.org>
Date:   Tue Jul 3 22:31:37 2018 +0200

    Validation of server response in XListHosts.
    
    If a server sends an incorrect length in its response, a client is prone
    to perform an out of boundary read while processing the data.
    
    The length field of xHostEntry is used to specify the amount of bytes
    used to represent the address. It is 16 bit, which means that it is not
    possible to perform an arbitrary memory access, but it might be enough
    to read sensitive information, e.g. malloc-related pointers and offsets.
    
    Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
    Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>

commit b676e62377483df77bcb6472d26b24f901323fa9
Author: Samuel Thibault <samuel.thibault@ens-lyon.org>
Date:   Wed Jun 13 15:46:58 2018 +0200

    XkbOpenDisplay.3: fix typo
    
    XkbOpenDisplay returns a pointer to Display, not a Display.
    
    Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>

commit 9c5845ff0dc080ff10bd68af4fc40fcd805728ca
Author: Martin Natano <natano@natano.net>
Date:   Sat Oct 8 19:57:50 2016 +0200

    Don't rebuild ks_tables.h if nothing changed.
    
    ks_tables.h is always considered out of date due to the forced rebuild
    of the makekeys util. This means the file is also rebuilt during 'make
    install', which is usually performed as root, which can to lead
    permission problems later on.
    
    Signed-off-by: Martin Natano <natano@natano.net>
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 796f754cba6d75b676a0fc39b97802198fceda4f
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat May 5 14:43:30 2018 -0700

    Change fall through comment in lcDB.c to match gcc's requirements
    
    Needs to match one of the regexps shown under
    https://gcc.gnu.org/onlinedocs/gcc-7.3.0/gcc/Warning-Options.html#index-Wimplicit-fallthrough
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 82ca6308757126fa7ffc6588f1e5d8e3be04251b
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Mar 24 19:45:14 2018 -0700

    Use size_t for buffer sizes in SetHints.c
    
    These variables store values returned from strlen() as a size_t
    and are passed to Xmalloc, which expects a size_t, so lets stop
    converting back and forth to int along the way.
    
    Reported by: Konstantin SKliarov
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>

commit 50a5a98984097d614227d22a49265e12b172cac7
Author: Bhavi Dhingra <b.dhingra@samsung.com>
Date:   Tue Jul 5 11:37:50 2016 +0530

    Fix possible memory leak in cmsProp.c:140
    
    https://bugs.freedesktop.org/show_bug.cgi?id=96814
    
    Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit a9dafdd57c71473fa3a2ec4887e973e4e9876d83
Author: Michal Srb <msrb@suse.com>
Date:   Thu Mar 15 09:50:58 2018 +0100

    Use flexible array member instead of fake size.
    
    The _XimCacheStruct structure is followed in memory by two strings containing
    fname and encoding. The memory was accessed using the last member of the
    structure `char fname[1]`. That is a lie, prohibits us from using sizeof and
    confuses checkers. Lets declare it properly as a flexible array, so compilers
    don't complain about writing past that array. As bonus we can replace the
    XOffsetOf with regular sizeof.
    
    Fixes GCC8 error:
      In function 'strcpy',
          inlined from '_XimWriteCachedDefaultTree' at imLcIm.c:479:5,
          inlined from '_XimCreateDefaultTree' at imLcIm.c:616:2,
          inlined from '_XimLocalOpenIM' at imLcIm.c:700:5:
      /usr/include/bits/string_fortified.h:90:10: error: '__builtin_strcpy'
      forming offset 2 is out of the bounds [0, 1] [-Werror=array-bounds]
         return __builtin___strcpy_chk (__dest, __src, __bos (__dest));
    
    Caused by this line seemingly writing past the fname[1] array:
      imLcIm.c:479:  strcpy (m->fname+strlen(name)+1, encoding);
    
    Reviewed-by: Keith Packard <keithp@keithp.com>
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

commit 34f4464f69a4d6ff0d1042500a62f9a5ed7f3647
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Tue Mar 6 11:42:27 2018 -0800

    If XGetImage fails to create image, don't dereference it to bounds check
    
    Reported by gcc 7.3:
    
    GetImage.c:110:25: warning: potential null pointer dereference [-Wnull-dereference]
      if (planes < 1 || image->height < 1 || image->bytes_per_line < 1 ||
                        ~~~~~^~~~~~~~
    
    Introduced by 8ea762f94f4c942d898fdeb590a1630c83235c17 in Xlib 1.6.4
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Emil Velikov <emil.velikov@collabora.com>

commit e835a9dcc3362b5e92893be756dd7ae361e64ced
Author: wharms <wharms@bfs.de>
Date:   Sun Sep 3 14:17:45 2017 +0200

    silence gcc warning assignment discards 'const' qualifier from pointer target type

commit 36a1ac0253fea82ff79cc52ba56c5691cfd07a3b
Author: wharms <wharms@bfs.de>
Date:   Sun Aug 20 21:51:57 2017 +0200

    remove empty line

commit e02dfe54f32b4165351d2712a9d2e0584906a3ce
Author: wharms <wharms@bfs.de>
Date:   Sun Aug 20 21:50:33 2017 +0200

    add _X_UNUSED to avoid unused variable warnings

commit 2911c39cecd63ed3747072a5eeeb9eedffc881e9
Author: walter harms <wharms@bfs.de>
Date:   Sat Jun 4 17:19:59 2016 +0200

    Fixes: warning: variable 'req' set but not,used
    
    Fixes: warning: variable 'req' set but not used [-Wunused-but-set-variable]
           by marking req _X_UNUSED
    	Solution was discussed on xorg-devel ML
           Peter Hutter, Alan Coopersmith
            Re: [PATCH libX11 3/5] fix: warning: pointer targets in passing argument 2 of '_XSend' differ in signedness [-Wpointer-sign]
    
    Signed-off-by: harms wharms@bfs.de

commit bf82ec0402479fd8399d69e7d62fc17d7956699a
Author: walter harms <wharms@bfs.de>
Date:   Sat Jun 4 17:22:07 2016 +0200

    mark _XDefaultIOError as no_return
    
    mark _XDefaultIOError as no_return. No one comes back from exit() ...
    
    Signed-off-by: harms wharms@bfs.de

commit 9abe8380074edea3ac4e72466ec47e921ca05e47
Author: walter harms <wharms@bfs.de>
Date:   Sat Jun 4 17:21:52 2016 +0200

    no need to check XFree arguments
    
    You can save a bit of code. The is no need to check XFree arguments bring  free_fontdataOM in line with other free function and check for NULL arg
    
    Signed-off-by: harms wharms@bfs.de

commit 433477fcb7e07d0c26a22ba78aae88827ed1f440
Author: walter harms <wharms@bfs.de>
Date:   Tue Apr 26 16:32:20 2016 +0200

    fix memleak in error path
    
    free all mem on error
    Signed-off-by: walter harms <wharms@bfs.de>

commit ed9f0d34abc645eee56e21863f23acb4d0bb8e9a
Author: walter harms <wharms@bfs.de>
Date:   Tue Apr 26 17:58:16 2016 +0200

    fix memleak in error path
    
    V2: remove unneeded NULL (reported by eric.engestrom@imgtec.com)
    
    fix mem leak in error path
    Signed-off-by: walter harms <wharms@bfs.de>

commit 7c78fc57693afa94cf26170f0f6276e3b7374ed0
Author: walter harms <wharms@bfs.de>
Date:   Tue Apr 26 16:34:11 2016 +0200

    no need to check args for Xfree()
    
    simplify code
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit c1c14af441ae73d1a8e67a971fafcf967e45ac48
Author: walter harms <wharms@bfs.de>
Date:   Tue Apr 26 16:23:46 2016 +0200

    remove stray extern
    
    remove stray extern
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit 714921f041a245dc5f37a689268b584226a2ccb9
Author: walter harms <wharms@bfs.de>
Date:   Mon Apr 11 18:26:52 2016 +0200

    no need to check argument for _XkbFree()
    
    simplify code by removing unneeded checks
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit d02c2466f65063a03c97dbcee05071c12a3676e6
Author: walter harms <wharms@bfs.de>
Date:   Mon Apr 11 18:22:38 2016 +0200

    fix more shadow warning
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit 0355c3926d5372f9762f235071dbd94a89bbbdad
Author: walter harms <wharms@bfs.de>
Date:   Thu Mar 31 19:16:33 2016 +0200

    fix shadow char_size
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit 916dffadf052135df3398651be873c353da629e1
Author: walter harms <wharms@bfs.de>
Date:   Thu Mar 31 19:14:32 2016 +0200

    remove argument check for free() adjust one inden
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit 6ec901ebca3fea6a762e22090dc35b1b90911133
Author: walter harms <wharms@bfs.de>
Date:   Thu Mar 31 19:12:17 2016 +0200

    _XIOError(dpy); will never return so remore dead
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit 83107a677b2ed458e4d62ea4a601e8181d3683d8
Author: walter harms <wharms@bfs.de>
Date:   Thu Mar 31 19:10:49 2016 +0200

    fix shadow warning
    
    Signed-off-by: walter harms <wharms@bfs.de>

commit 4fe66b1c5112b07bd09e28bbc021911d08a9621f
Author: Ryan C. Gordon <icculus@icculus.org>
Date:   Wed Aug 2 02:41:03 2017 -0400

    Valgrind fix for XStoreColor and XStoreColors.
    
    If the "pad" field isn't set, Valgrind will report it as uninitialized
    memory accesses when the struct is copied into the Display's send buffer.
    
    In practice, this is (probably) harmless, but Valgrind is correct in
    believing it's a bug.
    
    https://bugs.freedesktop.org/attachment.cgi?id=133189
    
    Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 7d2010fec25c2f52b873ad0572479eb43128b038
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Fri Apr 7 00:13:03 2017 -0700

    Improve table formatting in XkbChangeControls & XkbKeyNumGroups man pages
    
    Includes fix for Solaris Bug 24564279: "XkbKeyNumGroups.3x11 man page
    contains some malformed text" caused by extra whitespace after .TE macros
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit b856d5d929047d1ea169814d56e43784ea404c83
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Thu Mar 16 00:05:49 2017 -0700

    Clarify state parameter to XkbSetNamedDeviceIndicator
    
    Checking a Bool to see if it's NULL does not work well in C.
    Also reported in https://bugs.freedesktop.org/show_bug.cgi?id=251
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit c6dadd4cebd994aafb37a58b3adbaa82507c2d18
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Wed Mar 15 23:50:26 2017 -0700

    Make Xkb{Get,Set}NamedIndicator spec & manpages match code
    
    The XKB Library spec and the man pages for XkbGetNamedIndicator &
    XkbSetNamedIndicator included a device_spec argument neither function
    takes, and do not include the XkbGetNamedDeviceIndicator &
    XkbSetNamedDeviceIndicator variants that do take it (along with two
    other arguments).
    
    This updates them to match the interfaces the code has provided for
    decades.
    
    This has been reported multiple times, so this fixes:
    https://bugs.freedesktop.org/show_bug.cgi?id=251
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729812
    Sun Bug 4528016 XkbSetNamedIndicator & XkbGetNamedIndicator man pages are wrong
      (filed: alan.coopersmith@sun.com 2001-11-15 - now aka Oracle bug 15087506)
    X.Org Group Defect Id #9418
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit 2d20890e7ffd3ee88a9ceb25cdd2ac1fe7aaceb6
Author: Arthur Huillet <ahuillet@nvidia.com>
Date:   Wed Feb 1 15:02:41 2017 +0100

    _XDefaultError: set XlibDisplayIOError flag before calling exit
    
    _XReply isn't reentrant, and it can lead to deadlocks when the default error
    handler is called: _XDefaultError calls exit(1). It is called indirectly by
    _XReply when a X protocol error comes in that isn't filtered/handled by an
    extension or the application. This means that if the application (or one of its
    loaded shared libraries such as the NVIDIA OpenGL driver) has registered any
    _fini destructor, _fini will get called while still on the call stack of
    _XReply. If the destructor interacts with the X server and calls _XReply, it
    will hit a deadlock, looping on the following in _XReply:
    
        ConditionWait(dpy, dpy->xcb->reply_notify);
    
    It is legal for an application to make Xlib calls during _fini, and that is
    useful for an OpenGL driver to avoid resource leaks on the X server side, for
    example in the dlopen/dlclose case. However, the driver can not readily tell
    whether its _fini is being called because Xlib called exit, or for another
    reason (dlclose), so it is hard to cleanly work around this issue in the driver.
    
    This change makes it so _XReply effectively becomes a no-op when called after
    _XDefaultError was called, as though an XIOError had happened. The dpy
    connection isn't broken at that point, but any call to _XReply is going to hang.
    This is a bit of a kludge, because the more correct solution would be to make
    _XReply reentrant, maybe by broadcasting the reply_notify condition before
    calling the default error handler. However, such a change would carry a grater
    risk of introducing regressions in Xlib.
    
    This change will drop some valid requests on the floor, but this should not
    matter, as it will only do so in the case where the application is dying: X will
    clean up after it once exit() is done running. There is the case of
    XSetCloseDownMode(RETAIN_PERMANENT), but an application using that and wishing
    to clean up resources in _fini would currently be hitting a deadlock, which is
    hardly a better situation.
    
    Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
    Reviewed-by: Jamey Sharp <jamey@minilop.net>

commit 42f4d7af9cf6d1dbfa575552e057328b054a20c9
Author: Matt Turner <mattst88@gmail.com>
Date:   Sat Feb 25 21:54:22 2017 -0800

    libX11 1.6.5
    
    Signed-off-by: Matt Turner <mattst88@gmail.com>

commit a0da5835e8078445947c828fe2d86c1a31439012
Author: Adam Jackson <ajax@redhat.com>
Date:   Tue Feb 14 15:33:29 2017 -0500

    Revert "Compose sequences for rouble sign"
    
    This reverts commit d9e34061307748cb7318ed6b5f83ee5ee9b81fd0.
    
    Reported to break 'make check':
    
    https://lists.freedesktop.org/archives/xorg-devel/2017-February/052720.html

commit d9e34061307748cb7318ed6b5f83ee5ee9b81fd0
Author: Mihail Konev <k.mvc@ya.ru>
Date:   Fri Feb 10 18:48:18 2017 +0500

    Compose sequences for rouble sign
    
    Cyrillic combinations mirror the Qwerty-Jcuken keyboard layout.
    Also add Cyrillic sequences for hryvnia sign.
    
    Submitted-by: Victor V. Kustov <coyote@bks.tv>
    Reviewed-by: Victor V. Kustov <coyote@bks.tv>
    Signed-off-by: Mihail Konev <k.mvc@ya.ru>

commit 23d9623c661694aba8cf1e8f277dffa7a86cf065
Author: Petr Písař <petr.pisar@atlas.cz>
Date:   Sun Oct 30 12:49:11 2016 +0100

    Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
    
    The cs_CZ.UTF-8/XLC_LOCALE is an empty file leading to unsupported cs_CZ.UTF-8
    locale and reporting this error:
    
    Warning: locale not supported by Xlib, locale set to C
    
    Therefore this patch reverts to the en_US.UTF-8 definition file that was used
    before. This patch also deduplicates the cs_CZ.UTF-8 entry.
    
    <https://bugs.freedesktop.org/show_bug.cgi?id=98219>
    
    This reverts commit 33840a5465a2e5fecab520bfbdd2d1bd0a456f51
    
    Signed-off-by: Julien Cristau <jcristau@debian.org>

commit 71b0929ebc1f0f877f63e3f6de260f529daa6c69
Author: Mihail Konev <k.mvc@ya.ru>
Date:   Thu Jan 26 13:52:49 2017 +1000

    autogen: add default patch prefix
    
    Signed-off-by: Mihail Konev <k.mvc@ya.ru>

commit 2979011bc170c55894b9185b26376f8efc6db7d4
Author: Emil Velikov <emil.l.velikov@gmail.com>
Date:   Mon Mar 9 12:00:52 2015 +0000

    autogen.sh: use quoted string variables
    
    Place quotes around the $srcdir, $ORIGDIR and $0 variables to prevent
    fall-outs, when they contain space.
    
    Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

commit 4a0082a1b6affa65d38294f0e13511525cd8ad15
Author: Peter Hutterer <peter.hutterer@who-t.net>
Date:   Tue Jan 24 10:32:07 2017 +1000

    autogen.sh: use exec instead of waiting for configure to finish
    
    Syncs the invocation of configure with the one from the server.
    
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
    Reviewed-by: Emil Velikov <emil.velikov@collabora.com>

commit c74b070f2712c95f0db7c320a10232b0e5c83049
Author: Julien Cristau <jcristau@debian.org>
Date:   Sat Jan 7 16:20:31 2017 +0100

    Fix wrong Xfree in XListFonts failure path
    
    'ch' gets moved inside the allocated buffer as we're looping through
    fonts, so keep a reference to the start of the buffer so we can pass
    that to Xfree in the failure case.
    
    Fixes: commit 20a3f99eba5001925b8b313da3accb7900eb1927 "Plug a memory leak"
    
    Signed-off-by: Julien Cristau <jcristau@debian.org>
    Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

commit 663f47075fe67bab4f99bc5d186c49175d4a4334
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Jan 1 20:57:58 2017 -0800

    specs/libX11: Update Portability Considerations for the 21st century
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

commit 28f4b989b52fcf45c7e75a878d8d9c2583cd6b3c
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Jan 1 20:39:53 2017 -0800

    specs/libX11: Fix broken synopsis for Data/Data16/Data32
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 382561951e3460b09c21a1a23748cde0315fbb19
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Jan 1 20:31:54 2017 -0800

    specs/libX11: Add missing parameter types for XGetWindowProperty()
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 2beaecdb66965b861d6b790d151ba947f65f0a22
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Jan 1 20:16:08 2017 -0800

    specs/libX11: Make paramdef spacing more consistent
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 4c436c6c14cfd4c397b011563bf13c2872861133
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Jan 1 20:02:53 2017 -0800

    specs/libX11: Fix paramdef entries listing multiple parameters
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 1728b1a8a4718315da8e5c9cbc2c04bb75c74107
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Jan 1 19:38:40 2017 -0800

    specs/libX11: More synopsis fixes
    
    Mostly transforming macro definitions and functions taking void arguments
    from undecorated <para> tags to use <funcsynopsis> tags to get decorations.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit f0dc83db7e3a3d4a76c0f9d24763b80f01c893a9
Author: Lucien Gentis <lucien.gentis@waika9.com>
Date:   Wed Jun 1 17:02:47 2016 +0200

    Typos in "Xlib - C Language X Interface" document - Chapter 02
    
    This patch fixes typos and lack of tags in "Xlib - C Language X Interface" document - Chapter 02.
    
    Signed-off-by: Lucien Gentis <lucien.gentis@waika9.com>
    Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 20a3f99eba5001925b8b313da3accb7900eb1927
Author: Emilio Pozuelo Monfort <pochu@debian.org>
Date:   Tue Oct 25 21:30:15 2016 +0200

    Plug a memory leak
    
    This was introduced in 8ea762f.
    
    Reported-by: Julien Cristau <jcristau@debian.org>
    Signed-off-by: Emilio Pozuelo Monfort <pochu@debian.org>
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

commit 8f349feac24aacc958bd816afcc52380764e3d92
Author: Matthieu Herrb <matthieu.herrb@laas.fr>
Date:   Tue Oct 4 21:01:39 2016 +0200

    libX11 1.6.4
    
    Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>

commit 8ea762f94f4c942d898fdeb590a1630c83235c17
Author: Tobias Stoeckmann <tobias@stoeckmann.org>
Date:   Sun Sep 25 21:25:25 2016 +0200

    Validation of server responses in XGetImage()
    
    Check if enough bytes were received for specified image type and
    geometry. Otherwise GetPixel and other functions could trigger an
    out of boundary read later on.
    
    Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
    Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>

commit 8c29f1607a31dac0911e45a0dd3d74173822b3c9
Author: Tobias Stoeckmann <tobias@stoeckmann.org>
Date:   Sun Sep 25 21:22:57 2016 +0200

    The validation of server responses avoids out of boundary accesses.
    
    v2: FontNames.c  return a NULL list whenever a single
    length field from the server is incohent.
    
    Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
    Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>

commit 78851f6a03130e3c720b60c3cbf96f8eb216d741
Author: walter harms <wharms@bfs.de>
Date:   Mon Aug 15 19:18:14 2016 +0200

    XFree will accept NULL as argument
    
    since Xfree is a define for free():
      Xlibint.h:#define Xfree(ptr) free((ptr))
    
    Xfree will accept NULL and do nothing.
    
    Signed-off-by: Hans de Goede <hdegoede@redhat.com>

commit 83adf3d1e3d0d6602244381334f75c216da4ab6e
Author: Matthew D. Fuller <fullermd@over-yonder.net>
Date:   Sat Jun 4 11:24:01 2016 -0500

    Fixup param specification for XChangeProperty()
    
    Signed-off-by: Matthew D. Fuller <fullermd@over-yonder.net>
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

commit 3129c757f9da8586ab8b8654a56c8f687cc9ef5c
Author: Mats Blakstad <mats.gbproject@gmail.com>
Date:   Sun Feb 28 13:22:03 2016 -0500

     New compose keys for local languages in Togo
    
    Signed-off-by: James Cloos <cloos@jhcloos.com>

commit e1011b9e2f6c82255959cf3cc1d8cda402ded0a9
Author: Daniel Albers <daniel@lbe.rs>
Date:   Wed Mar 9 14:35:48 2016 +0100

    Add Compose sequence for U+1F4A9.
    
    Signed-off-by: Daniel Albers <daniel@lbe.rs>

commit 6d7bb040c928485f2557c2c914b95cffb2354179
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Feb 6 14:18:32 2016 -0800

    xcms: use size_t for pointer offsets passed to strncmp
    
    instead of converting to int and back
    
    Fixes clang warnings of the form:
    HVC.c:190:43: warning: implicit conversion changes signedness: 'int' to
          'unsigned long' [-Wsign-conversion]
              if (strncmp(spec, _XcmsTekHVC_prefix, n) != 0) {
                  ~~~~~~~
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit a9266804eed38a83897ab5f0f9f8a8ab82a98882
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Feb 6 13:32:44 2016 -0800

    xcms: use unsigned indexes when looping through unsigned values
    
    Clears many gcc warnings of the form:
    
    uvY.c: In function ‘XcmsCIEuvYToCIEXYZ’:
    uvY.c:263:19: warning: comparison between signed and unsigned integer
      expressions [-Wsign-compare]
         for (i = 0; i < nColors; i++, pColor++) {
                       ^
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 0ee0d383b4488b7b90d8bd50b75c371e0dc0d397
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Feb 6 13:01:25 2016 -0800

    xcms: use size_t for strlen/sizeof values instead of converting to int & back
    
    Fixes gcc warnings of the form:
    
    IdOfPr.c: In function ‘XcmsFormatOfPrefix’:
    IdOfPr.c:69:32: warning: comparison between signed and unsigned integer expressions [-Wsign-compare]
         if ((len = strlen(prefix)) >= sizeof(string_buf)) {
                                    ^
    IdOfPr.c:83:11: warning: comparison between signed and unsigned integer expressions [-Wsign-compare]
       if (len >= sizeof(string_buf)) Xfree(string_lowered);
               ^
    IdOfPr.c:97:11: warning: comparison between signed and unsigned integer expressions [-Wsign-compare]
       if (len >= sizeof(string_buf)) Xfree(string_lowered);
               ^
    IdOfPr.c:104:13: warning: comparison between signed and unsigned integer expressions [-Wsign-compare]
         if (len >= sizeof(string_buf)) Xfree(string_lowered);
                 ^
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 4de6ed3e7b1833c52c9d58ab74d59d57ca2a9f0d
Author: Dominik Muth <nxdomainuser-muth@yahoo.com>
Date:   Thu Mar 26 07:52:58 2015 +0100

    Xlib.h: Fix macros imitating C functions.
    
    The basic rule "put parantheses around macro parameters" should be
    observed where possible. Otherwise code like
    
        ConnectionNumber(foo = bar);
    
    fails to compile. (It obviously passes if ConnectionNumber is a C
    function.) There are several other macros amended for the same reason.
    
    This bug appeared while building http://ioccc.org/1993/cmills.c, so
    historically it was not present.
    
    Signed-off-by: Dominik Muth <muth@nxdomain.no-ip.biz>
    Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 3706b0f2b14cc97578a6bee620266edca2722ebf
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Fri Nov 15 18:03:25 2013 -0800

    Don't need to link libX11-xcb against libX11
    
    libX11-xcb only accesses data structures defined in X11 headers,
    it doesn't call any functions or reference any global variables
    in libX11 itself.  (Seems to have been left from previous XCL
    implementation.)
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit eddf1bbd18872b286a9f939140f0cd9ba4e93804
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Fri Jan 22 11:44:25 2016 -0800

    Stop checking for preferred order of local transports
    
    Removes --with-local-transport-order=... flag to configure.
    
    Code which used this ordered list was removed in commit 15e5eaf6289
    which outsourced X11 connection handling & authentication to libxcb.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>

commit 1a66c1e964ff8d11382313404f48b5a3d5ed8be8
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Fri Jan 22 09:39:28 2016 -0800

    Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
    
    Removes --enable-secure-rpc & --disable-secure-rpc flags to configure
    
    Code that used SECURE_RPC definitions was removed in commit 15e5eaf6289
    which outsourced X11 connection handling & authentication to libxcb.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>

commit 7eb724dc24505f1591ef32620fa63f079b540646
Author: Olivier Fourdan <ofourdan@redhat.com>
Date:   Thu Jan 21 11:54:19 2016 +0100

    XKB: fix XkbGetKeyboardByName with Xming server
    
    XkbGetKeyboardByName relies on flags to read the data from the server.
    
    If the X server sends us the wrong flags or if a subreply is smaller
    than it should be, XkbGetKeyboardByName will not read all the available
    data and leave data in the buffer, which will cause the next _XReply()
    to fail with:
    
    [xcb] Extra reply data still left in queue
    [xcb] This is most likely caused by a broken X extension library
    [xcb] Aborting, sorry about that.
    xcb_io.c:576: _XReply: Assertion `!xcb_xlib_extra_reply_data_left' failed.
    Aborted
    
    Check if there is some extra data left at the end of
    XkbGetKeyboardByName() and discard that data if any is found.
    
    Many thanks to Peter Hutterer <peter.hutterer@who-t.net> for finding the
    root cause of the issue and Adam Jackson <ajax@redhat.com> for helping
    with the analysis!
    
    Signed-off-by: Olivier Fourdan <ofourdan@redhat.com>
    Reviewed-by: Daniel Stone <daniels@collabora.com>
    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>

commit 43ba0a68d3d17b496ec1f48d44921122ddd7d7d9
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Dec 19 18:03:41 2015 -0800

    lcPubWrap: replace malloc(strlen) + strcpy with strdup
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit 6fc95cb12b70c5a67cb4fc5e5749f9f1ec741e2a
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Dec 19 10:21:04 2015 -0800

    XlcDL.c: reduce code duplication
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit f7ecc0856be58608881d2086954cb71857ad64e1
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Dec 19 10:19:25 2015 -0800

    XlcDL.c: replace strcpy+strcat sequences with snprintf
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit 522989b34398bd6a6ea144c4af0ba69d6dc4faea
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Dec 19 10:05:42 2015 -0800

    XDefaultOMIF: Remove comments referring to ancient Sun bug ids
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit b738a104ae80e4270dd1d215ad0c6a80016982c2
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Dec 19 10:00:22 2015 -0800

    XDefaultOMIF: additional code simplification
    
    Don't need to test for a case that we already returned for, don't need
    to store a count that will only ever be 1 if we didn't return, don't
    need to increment pointers to allow storing more than one item when we
    can only ever possibly do one.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit 31011cf100419269eae7409581c784638be503cf
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Dec 19 09:46:31 2015 -0800

    XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup
    
    Code seems to have been originally written to handle appending multiple
    strings, but only ever operates on a single string.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit c27c46d5e22bbf60fb5608eaabe584b7fdeb0b09
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Dec 19 09:20:55 2015 -0800

    Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Adam Jackson <ajax@redhat.com>

commit 4359dfabc04af082872d2bc2d5b52e26d6d93290
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Fri Dec 4 22:20:53 2015 -0800

    Delete #if 0 hunks of code
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit a2f9dfac286f37e54eb47d4736cc3f0150224a84
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Thu Dec 3 23:38:07 2015 -0800

    Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
    
    Rework code to store allocations directly into XIM struct instead of
    temporary local variables, so we can use _XCloseIM to unwind instead
    of duplicating it, and consistently jump to error handler on failure,
    instead of sometimes leaking and sometimes freeing.
    
    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=93183
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 07a97b3944467dce085a1efd24706cc851d2caf2
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Thu Dec 3 23:19:48 2015 -0800

    Bug 93184: read_EncodingInfo invalid free
    
    Free the correct bits of memory if we run out and need to unwind
    
    Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=93184
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

commit 11118e9eb3705fcbe42b6a68d4a8aa86ab0211f1
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sat Nov 28 13:18:11 2015 -0800

    Remove unused definition of XCONN_CHECK_FREQ
    
    The only use of XCONN_CHECK_FREQ was removed in commit 15e5eaf62897b3179
    when we dropped the old Xlib connection handling in favor of xcb's.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Reviewed-by: Mark Kettenis <kettenis@openbsd.org>

commit 5f0da8311a61498edf073cc877f5b467bfd5f863
Author: James Cloos <cloos@jhcloos.com>
Date:   Thu Dec 3 18:24:44 2015 -0500

    Fix another missing update in cf4d5989383a
    
    Reported in:
    
       https://bugs.freedesktop.org/show_bug.cgi?id=81875#c7
    
    Signed-off-by: James Cloos <cloos@jhcloos.com>

commit 33840a5465a2e5fecab520bfbdd2d1bd0a456f51
Author: James Cloos <cloos@jhcloos.com>
Date:   Thu Dec 3 18:15:40 2015 -0500

    Fix missing update in cf4d5989383a
    
    Reported in:
    
       https://bugs.freedesktop.org/show_bug.cgi?id=81875#c7
    
    Signed-off-by: James Cloos <cloos@jhcloos.com>

commit dbcb847a08c44d99e4e1de2ba777d63238fb0e03
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Sep 27 18:38:32 2015 -0700

