github/xrdp
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Commit Graph

  • 525be513be chansrv: Make XrdpIme survive reconnects and stop native-client input being eaten devel Liyi Meng 2026-09-19 00:12:39 +00:00
  • f35530b523 chansrv: Stop XrdpIme's commit racing the client's own IME cleanup Liyi Meng 2026-08-18 13:07:55 +00:00
  • 55a4f81083 chansrv: Fix regression from the previous commit breaking Model A entirely Liyi Meng 2026-08-18 08:22:45 +00:00
  • 82b4eb6556 chansrv: Stop reclaiming XrdpIme from a deliberately-chosen engine Liyi Meng 2026-08-18 08:13:45 +00:00
  • a3934cde9a chansrv: Protect bus lifetime across threads, detect stale fast path Liyi Meng 2026-08-18 06:25:59 +00:00
  • 77388dab8a chansrv: Fix deadlock in xrdp_input_enable() from wrong-thread call Liyi Meng 2026-08-17 22:25:29 +00:00
  • 2a77f5f3e8 chansrv: Rewrite ibus unicode input around a private main loop Liyi Meng 2026-08-17 22:10:23 +00:00
  • 92fdb09959 chansrv: Fix stale engine handling and cross-thread ibus commit Liyi Meng 2026-08-17 20:38:20 +00:00
  • 38c8db8293 chansrv: Reconnect ibus when the cached connection has gone stale Liyi Meng 2026-08-16 16:21:53 +00:00
  • 913ea383d7 Add dev container Liyi Meng 2026-08-17 08:20:00 +00:00
  • a02ed62782 Merge pull request #3845 from matt335672/rdpedyc_data_fragments matt335672 2026-08-14 12:19:49 +01:00
  • a6d80e17ab Code quality: Address Copilot review comments matt335672 2026-08-13 11:37:11 +01:00
  • f4249b3ca6 chansrv: Use common dynamic dechunker matt335672 2026-08-10 10:11:03 +01:00
  • 77d9b49432 chansrv: Use streams for dynamic channel processing matt335672 2026-08-10 09:53:13 +01:00
  • 63afb676e6 drdynvc: Improve dynamic channel support matt335672 2026-08-07 12:04:36 +01:00
  • f745c9152d drdynvc: Change channel processing to use streams matt335672 2026-08-07 11:43:19 +01:00
  • e4b0621229 tests: Add tests for dynamic dechunker matt335672 2026-08-06 12:22:56 +01:00
  • 0a986869cc dechunker: Add handler for Dynamic channels matt335672 2026-08-04 11:24:58 +01:00
  • fe850a22c0 Merge pull request #3839 from matt335672/add_dechunker matt335672 2026-07-28 10:46:27 +01:00
  • 3d137431a9 Merge pull request #3837 from the-deniss/fix/trans_force_read_s-bounds-check-uses-wrong-pointer matt335672 2026-07-28 10:10:45 +01:00
  • b36ad7b2d0 Cast to size_t in bounds macros; drop resulting dead check Denis Skvortsov 2026-07-27 15:35:26 +03:00
  • e4f4364c9b Remove check to avoid -Wtype-limits Denis Skvortsov 2026-07-25 18:47:19 +03:00
  • 5ae11e2a37 Harden stream bounds checks against pointer-arithmetic overflow Denis Skvortsov 2026-07-25 17:46:28 +03:00
  • 2e8a4a82e1 test suite: Add way to run individual common tests matt335672 2026-07-23 11:33:13 +01:00
  • 3ef2f8830a Dechunker: Add tests matt335672 2026-07-22 12:34:18 +01:00
  • be95ba3017 dechunker: Create separate module for dechunking matt335672 2026-07-17 11:57:30 +01:00
  • a2d130bc5b Fix for trans_force_read_s Bounds Check Uses Wrong Pointer Denis Skvortsov 2026-07-22 12:03:58 +03:00
  • de284747ae Merge pull request #3836 from matt335672/update_gfx_state_machine matt335672 2026-07-20 14:14:39 +01:00
  • a5975210f0 code quality: Forward-port code comments matt335672 2026-07-20 09:51:14 +01:00
  • 8812646d0f Merge pull request #3829 from the-deniss/fix/dynvc-multi-chunk-reassembly-logic-defects matt335672 2026-07-16 10:47:51 +01:00
  • c73c827e5a compilation: Fix errors matt335672 2026-07-16 10:36:01 +01:00
  • b824c93b86 Fix for DYNVC Multi-Chunk Reassembly Logic Defects Denis Skvortsov 2026-07-15 17:24:30 +03:00
  • 3af31df3fc Merge commit from fork metalefty 2026-07-02 17:33:45 +09:00
  • bb0c5984c2 Merge commit from fork metalefty 2026-07-02 17:30:17 +09:00
  • 5642decb5f Merge commit from fork metalefty 2026-07-02 17:24:29 +09:00
  • 4bf38e3d8e Merge commit from fork metalefty 2026-07-02 17:22:04 +09:00
  • 2c2eff3b59 Merge commit from fork metalefty 2026-07-02 17:09:54 +09:00
  • 0aae834802 Merge commit from fork metalefty 2026-07-02 16:57:51 +09:00
  • 0af3b1ecf8 Merge commit from fork metalefty 2026-07-01 17:56:20 +09:00
  • b3e1a5f17d Merge commit from fork metalefty 2026-07-01 17:45:49 +09:00
  • 9627823a1b Merge commit from fork metalefty 2026-07-01 08:51:16 +09:00
  • f76a30b577 CVE-2026-55626: Disable Xvnc TCP listning in UDS mode Koichiro Iwao 2026-05-29 17:53:05 +09:00
  • 492bd7ed4d Merge pull request #3813 from matt335672/update_librfxcodec matt335672 2026-06-23 09:45:17 +01:00
  • fea7f56280 librfxcodec: Update to latest version in devel matt335672 2026-06-23 09:27:21 +01:00
  • 21d38d0c1e Merge pull request #3811 from matt335672/fix_cve_2026_42218_regression matt335672 2026-06-17 10:08:51 +01:00
  • d4d20fc82d sesexec: Fix CVE-2026-42218 regression matt335672 2026-06-17 09:54:06 +01:00
  • 6cb996e355 Merge pull request #3698 from lcniel/enable_token_with_auto_logon matt335672 2026-06-17 09:36:43 +01:00
  • 4aa8bdf1ea CVE-2026-55238: Possible OOB reads in capability processing matt335672 2026-06-11 16:32:06 +01:00
  • 9d16ec4e75 CVE-2026-55639: OOB read in GCC Conference Create Request matt335672 2026-06-15 10:36:24 +01:00
  • b1edb60c1d CVE-2026-55645: OOB read in Client Control PDU processing matt335672 2026-06-15 11:23:08 +01:00
  • 2394084bf4 CVE-2026-54538: Pre-auth infinite loop in TS_SHARECONTROLHEADER matt335672 2026-06-15 11:52:25 +01:00
  • a85e108cdf xrdp.ini: Remove [vnc-any] as a default section matt335672 2026-04-15 10:58:49 +01:00
  • 9834a58ca6 CVE-2026-41252: lib_palette_update Heap Buffer Overflow matt335672 2026-04-15 10:50:10 +01:00
  • c56a3ea202 Merge commit from fork metalefty 2026-06-15 15:40:24 +09:00
  • 40c1a316f4 Allow for token logon even with INFO_AUTOLOGON flag set Leonard Nielsen 2026-01-20 12:13:48 +01:00
  • f94ae70148 Use symbols for desktop size limits matt335672 2026-06-08 11:12:07 +01:00
  • 2a94fc9674 CVE-2026-41521: lib_framebuffer_update int overflow matt335672 2026-04-15 11:35:39 +01:00
  • e42951868b CVE-2026-44978: Check FIPS PDU padding value before use matt335672 2026-05-06 11:40:08 +01:00
  • 3e39be9c8e CVE-2026-44178: Heap overflow in xrdp->chansrv msgs matt335672 2026-04-20 13:15:17 +01:00
  • c8cd758283 Merge pull request #3798 from metalefty/freebsd-ci metalefty 2026-04-29 00:36:02 +09:00
  • ad6c210c2b CI: Run FreeBSD CI via GitHub Actions Koichiro Iwao 2026-04-28 11:46:04 +09:00
  • e6f350ae1a CI: Remove Cirrus CI as the service is shutting down Koichiro Iwao 2026-04-28 11:45:25 +09:00
  • 07479384a6 CVE-2026-42218: Ensure auth fails take a fixed time matt335672 2026-04-27 10:19:57 +01:00
  • 102da4f42b Merge pull request #3792 from matt335672/sig_fix matt335672 2026-04-20 13:47:22 +01:00
  • 5fa4dc02bc regression: Fix SEGV in xrdp when running over TLS matt335672 2026-04-20 13:34:09 +01:00
  • 0005893a93 Merge pull request #3681 from firewave/cppcheck-performance matt335672 2026-04-17 16:26:20 +01:00
  • 0410abef98 enabled cppcheck performance checks firewave 2025-12-01 22:29:12 +01:00
  • f6d3d12137 Merge pull request #3787 from metalefty/security metalefty 2026-04-17 21:53:46 +09:00
  • 3610afd52b Clarify handling of duplicate vulnerability reports Koichiro Iwao 2026-04-17 21:10:26 +09:00
  • 43fa055ec4 Merge pull request #3786 from matt335672/remove_ulalaca matt335672 2026-04-17 12:46:33 +01:00
  • 800b5f5e7c ulalaca: Remove for now matt335672 2026-04-17 12:23:17 +01:00
  • 41f6e6b995 Merge pull request #3782 from metalefty/cifix metalefty 2026-04-16 07:34:23 +09:00
  • 5e7a7c046d Supress -Wunused-function warnings Koichiro Iwao 2026-04-14 15:24:33 +09:00
  • c3788a374a Merge commit from fork metalefty 2026-04-14 20:39:42 +09:00
  • 53bc57cf59 security: Exit on failure of env_set_user() matt335672 2026-03-06 11:44:56 +00:00
  • 7738d111d5 Merge commit from fork metalefty 2026-04-14 17:00:20 +09:00
  • 084eb2237e Merge commit from fork metalefty 2026-04-14 16:43:27 +09:00
  • 2e465c0b3a Merge commit from fork metalefty 2026-04-14 15:14:20 +09:00
  • 16c971a437 Merge commit from fork metalefty 2026-04-14 15:07:03 +09:00
  • 6d1f89a919 Merge commit from fork metalefty 2026-04-14 15:01:23 +09:00
  • 1bacf22fb7 Merge commit from fork metalefty 2026-04-14 14:06:45 +09:00
  • 220a50b1d2 Merge commit from fork metalefty 2026-04-14 09:30:27 +09:00
  • 832edcab20 Merge pull request #3779 from jsorg71/instfiles_err jsorg71 2026-04-06 12:05:57 -07:00
  • 05210adb22 use -f when creating sym link Jay Sorg 2026-04-04 23:16:19 -07:00
  • 99dfacfffc Merge pull request #3755 from matt335672/gfx_resize matt335672 2026-04-06 12:46:46 +01:00
  • 41a4af0a36 CVE-2026-35512: Heap overflow in dynvc processing matt335672 2026-04-01 10:49:51 +01:00
  • 6831249bed CVE-2026-33516 : Address potential OOB read matt335672 2026-04-02 11:23:42 +01:00
  • 8e5875e438 Merge pull request #3777 from gpotter2/rename-rdpflags matt335672 2026-04-01 09:17:57 +01:00
  • 42b830f124 Rename RDP_INFO flags to spec names, add missing gpotter2 2026-03-30 15:06:55 +02:00
  • 36fbebcb9d Merge pull request #3768 from matt335672/remove_unused_auth matt335672 2026-03-26 17:55:48 +00:00
  • 1f34c4b37c Merge pull request #3767 from Kropyls/devel matt335672 2026-03-23 18:23:10 +00:00
  • 3c131a9f5e CVE-2026-33689: Fix length check on channel open matt335672 2026-03-23 13:42:50 +00:00
  • 8bfc79a0bc Update security reporting instructions in SECURITY.md matt335672 2026-03-23 14:41:33 +00:00
  • fcc5bd79ea g_tcp_connect fix: - add addr_is_ipv4 helper function - add addr_is_ipv6 helper function - add get_socket_family helper function - g_tcp_connect: - #define for MAX_PORT_STR length - create *addr_arg char that is used in getaddrinfo so we can do any last-minute changes directly - add chars host and service which are primarily used for debug logging of attempted connection points - calls get_socket_family to discover family of socket - add switch case logic for AF_INET6/4: - v4: just calls addr_is_ipv6 so we don't fail on a hostname input - v6: drop addrconfig flag and add AI_ALL so we can try to map ipv4 destinations against ipv6 socket to support varied configurations we could see - if an ipv4 address comes in against an ipv6 socket, we map it to try and connect anyways - getaddrinfo now calls addr_arg so it picks up changes that an ipv6-case may have done - before calling connect, use getnameinfo to get logging values for the actual host ip/port we are about to attempt a connect on - I found this useful when debugging so thought it had value to keep - change if (res > -1) to if (res == 0): the bsd man pages for getaddrinfo only promise that it returns 0 on success, so it seems sensible to me to cover the event that an error code could be positive, which freebsd has some positive EAI_* errors based on this: https://github.com/freebsd/freebsd-src/blob/main/lib/libc/net/gai_strerror.c - remove connect_loopback entirely: this had several bits of logic handling ipv6 and ipv4 mixing already and ended up being redundant because of the restructuring of g_tcp_connect, which covers direct ip address char* inputs now - add comment about OSX to IPv6 function for clarity Matt Cunningham 2026-03-23 08:21:29 -04:00
  • 0f2dc88541 sesman: Remove unused authentication methods matt335672 2026-03-23 10:39:33 +00:00
  • b9742d94f7 Merge pull request #3764 from matt335672/regression_smartcard_removal matt335672 2026-03-18 20:24:05 +00:00
  • 7d618945b1 regression: Fix client issues with no smartcard matt335672 2026-03-18 19:56:29 +00:00
  • 7f6e198b06 Merge pull request #3761 from matt335672/update_actions matt335672 2026-03-18 10:38:15 +00:00
  • e2148a360c CI: Upgrade to latest github action versions matt335672 2026-03-18 09:53:46 +00:00
  • 45f62bdedd CVE-2026-33145: Default AllowAlternateShell to 'no' matt335672 2026-03-11 15:55:04 +00:00