Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • libxcb libxcb
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 39
    • Issues 39
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 11
    • Merge requests 11
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar

Due to an influx of spam, we have had to impose restrictions on new accounts. Please see this wiki page for instructions on how to get full permissions. Sorry for the inconvenience.

  • xorgxorg
  • lib
  • libxcblibxcb
  • Merge requests
  • !30

Allow full paths to sockets on non-macOS

  • Review changes

  • Download
  • Email patches
  • Plain diff
Open Demi Marie Obenour requested to merge DemiMarie/libxcb:allow-full-paths into master Jul 03, 2022
  • Overview 10
  • Commits 2
  • Pipelines 10
  • Changes 2

When combined with libxtrans!7, this allows CVE-2020-25697 to be mitigated by placing the AF_UNIX socket in a secure directory on the filesystem.

This enables HAVE_LAUNCHD unconditionally and deletes the configure switch. It also drops abstract socket support. This MR is sufficient for xcb, but libxtrans!7 is needed for Xlib.

Signed-off-by: Demi Marie Obenour demiobenour@gmail.com

Edited Aug 13, 2022 by Demi Marie Obenour
Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: allow-full-paths