Age | Commit message (Collapse) | Author | Files | Lines |
|
This patch is in response to the following security vulnerabilities
(CVEs) reported to NVIDIA against libvdpau:
CVE-2015-5198
CVE-2015-5199
CVE-2015-5200
To address these CVEs, this patch:
- replaces all uses of getenv(3) with secure_getenv(3);
- uses secure_getenv(3) when available, with a fallback option;
- protects VDPAU_DRIVER against directory traversal by checking for '/'
On platforms where secure_getenv(3) is not available, the C preprocessor
will print a warning at compile time. Then, a preprocessor macro will
replace secure_getenv(3) with our getenv_wrapper(), which utilizes the check:
getuid() == geteuid() && getgid() == getegid()
See getuid(2) and getgid(2) for further details.
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
Reviewed-by: Florian Weimer <fweimer@redhat.com>
|
|
Signed-off-by: Bibhuti Bhushan Prusty <bprusty@nvidia.com>
Reviewed-by: José Hiram Soltren <jsoltren@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
|
|
vdpau_trace.cpp: In function 'void _vdp_cap_dump_video_mixer_attribute_value(VdpVideoMixerAttribute, const void*, bool)':
vdpau_trace.cpp:539:48: error: cast from type 'const void*' to type 'const float (**)[3][4]' casts away qualifiers [-Werror=cast-qual]
ptr = *(VdpCSCMatrix const * *)value;
^
vdpau_trace.cpp: In function 'void _vdp_cap_dump_bitstream_buffer_list(uint32_t, const VdpBitstreamBuffer*)':
vdpau_trace.cpp:1175:52: error: cast from type 'const void* const' to type 'uint8_t* {aka unsigned char*}' casts away qualifiers [-Werror=cast-qual]
uint8_t * ptr = (uint8_t * )buffers[0].bitstream;
^
Signed-off-by: Robert Morell <rmorell@nvidia.com>
Reviewed-by: Stephen Warren <swarren@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
|
|
The following three were never a part of the public API and as such
should have never been exported by libvdpau_trace.so
Correct that by marking them as static, thus allowing the compiler
to hide them from the exported namespace.
_vdp_cap_init_planes_adapt_surface_video
_vdp_cap_init_planes_adapt_surface_bitmap
_vdp_cap_init_planes_adapt_surface_output
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
Reviewed-by: Aaron Plattner <aplattner@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
|
|
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
Reviewed-by: Aaron Plattner <aplattner@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
|
|
Nothing actually uses VdpPoint, so this tracing function was never called. I
left the VdpPoint type in vdpau.h for now, just in case anyone actually uses it
themselves.
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
|
|
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
|
|
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
|
|
Add profiles for MPEG-4 part 2, DivX 4, and DivX 5. Also add new high quality
scaling options.
|
|
|
|
|
|
I forgot to include this change in commit
1290f7c190e38f483b0203e932715a68b899e35c.
|
|
|