Sam Lantinga e4ef1885d9 Fixed bug 3890 - Incomplete fix for CVE-2017-2888 ...

Felix Geyer

http://hg.libsdl.org/SDL/rev/a31ee4d64ff6 tries to fix CVE-2017-2888.
Unfortunately compilers may optimize the second condition "(size / surface->pitch) != surface->h" away.
See https://bugzilla.redhat.com/show_bug.cgi?id=1500623#c2
I've verified that this is also the case on Debian unstable (gcc 7.2).

2017-10-16 14:57:42 -07:00

..

atomic

Add atomics for Watcom/x86 as inline asm

2017-08-18 16:35:55 -04:00

audio

coreaudio: changed device close procedure to prevent long hangs in some cases.

2017-10-13 01:15:29 -04:00

core

Check SDL_UDEV_DYNAMIC first, then SDL_UDEV_LIBS separately

2017-10-10 20:22:15 -04:00

cpuinfo

SDL_cpuinfo.c: add os/2 support to SDL_GetCPUCount() and SDL_GetSystemRAM().

2017-08-21 13:00:40 -07:00

dynapi

Added functions to query and set the SDL memory allocation functions:

2017-10-12 13:44:28 -07:00

events

Fixed bug 3880 - X Error upon quit since rev. 11607

2017-10-13 19:30:34 -07:00

file

Fixed bug 3760 - RWops doesn't check for integer overflow when stdio_fseek only supports 32 bits

2017-09-09 08:36:37 -07:00

filesystem

filesystem: Patched to compile on QNX.

2017-08-17 03:22:44 -04:00

haptic

Renaming of guard header names to quiet -Wreserved-id-macro

2017-08-28 00:22:23 -07:00

joystick

The event filter and event watch functions are now thread-safe

2017-10-10 17:41:41 -07:00

libm

Updated copyright for 2017

2017-01-01 18:33:28 -08:00

loadso

revert files I didnt mean to commit!

2017-09-29 10:15:44 -07:00

main

Updated version to 2.0.7

2017-10-12 08:08:04 -07:00

power

power: whoops, that should be "==" not "!=".

2017-07-03 16:45:12 -04:00

render

Normalize touch events to the render viewport (thanks Sylvain!)

2017-10-12 08:37:55 -07:00

stdlib

Fixed compiler warning

2017-10-12 17:17:09 -07:00

test

Fixed bug 3879 - add missing SDLCALL to SDLTest_TrackedMalloc & co.

2017-10-13 09:50:04 -07:00

thread

Renaming of guard header names to quiet -Wreserved-id-macro

2017-08-28 00:22:23 -07:00

timer

Fixed bug 3745 - specify SDLCALL as the calling convention for API callbacks

2017-08-14 06:28:21 -07:00

video

Fixed bug 3890 - Incomplete fix for CVE-2017-2888

2017-10-16 14:57:42 -07:00

SDL_assert_c.h

Updated copyright for 2017

2017-01-01 18:33:28 -08:00

SDL_assert.c

Fixed bug 3883 - SDL_assert / SDL_PromptAssertion in TTY mode does not accept options ("abriA")

2017-10-15 21:21:19 -07:00

SDL_dataqueue.c

Added SDL_PeekIntoDataQueue().

2017-10-10 11:56:54 -04:00

SDL_dataqueue.h

Added SDL_PeekIntoDataQueue().

2017-10-10 11:56:54 -04:00

SDL_error_c.h

Updated copyright for 2017

2017-01-01 18:33:28 -08:00

SDL_error.c

Fixed bug 3696 - SDL_ShowMessageBox displays different error from intended

2017-07-10 17:16:12 -07:00

SDL_hints.c

A hint with an empty string should be treated as the default value

2017-09-21 14:48:03 -07:00

SDL_internal.h

Some patches to make SDL compile with armcc (ARM's C compiler).

2017-03-02 13:33:04 -05:00

SDL_log.c

Fixed bug 3745 - specify SDLCALL as the calling convention for API callbacks

2017-08-14 06:28:21 -07:00

SDL.c

Backing out broken change from previous commit.

2017-04-01 00:46:42 -04:00