Martin Fleisz
d2ba84a688
Merge pull request #6382 from bmiklautz/release_220
...
FreeRDP security and version 2.2.0 release
2.2.0
2020-07-20 15:38:46 +02:00
Bernhard Miklautz
3640d45996
new: Changelog for 2.2.0
2020-07-20 14:21:59 +02:00
Norbert Federa
8526965eef
core: fix invalid inttype and reference
...
The error message in tpdu_read_header() printed the pointer address and
used PRIu16 for an UINT8 type
(cherry picked from commit 54fdf7947d4d35589dab9ec3e37839606ffcc985)
Fixes #6380
2020-07-20 14:12:34 +02:00
akallabeth
da684f5335
Fixed missing input sanitation for GFX surfaces.
...
Thanks to Sunglin and HuanGMz of the Knownsec 404 security team and pangzi of pwnzen
(cherry picked from commit 5592cb2e10da42592af98f5533d2e42181e86821)
2020-07-15 18:23:57 +02:00
akallabeth
be8c8640ea
Fixed input sanitation in rdpgfx_recv_solid_fill_pdu
...
The input rectangle must be checked for plausibility.
Thanks to Sunglin and HuanGMz of the Knownsec 404 security team and pangzi of pwnzen
(cherry picked from commit d862a03cbf88ec6e76e47b84eae7e214690cb607)
2020-07-15 18:23:49 +02:00
Giovanni Panozzo
138256fbc5
Fix seeking in Cache Brush and other Secondary Drawing Orders
...
(cherry picked from commit 9f7e475c1652c2b1e30e0406ec0bc7ea3f2330ff)
Fixes #6374
2020-07-15 16:45:14 +02:00
Bernhard Miklautz
8f3e7aa373
Merge pull request #6319 from akallabeth/stable-2.0-backports3
...
Stable 2 backports from master
2020-07-15 16:42:24 +02:00
Kobi Mizrachi
da3caff12a
server: proxy: add extern C for c++ plugins
...
(cherry picked from commit 755d20501bac9c935a88d0ba040a4410681c1aa7)
2020-07-08 16:49:12 +02:00
Kobi Mizrachi
43924365fb
server: proxy: rail: Fix rail handshake flags sync issue at reconnect
...
(cherry picked from commit cc9ef8f74e59f9351aca84a2a95048a4af274af6)
2020-07-07 15:03:37 +02:00
Kobi Mizrachi
f5ddbb73e0
rail: server: add API to set railHandshakeExflags
...
(cherry picked from commit 004c2f49e4068270cbd5cfb9f44c015c6fb931ea)
2020-07-07 15:03:37 +02:00
Kobi Mizrachi
14119ac48d
server: proxy: fix race issue
...
Proxy server might receive input updates while client side being
redirected (and reset), then a heap-after-free might occur. To solve
this, we register server input/update callbacks only after client is
fully activated.
(cherry picked from commit db0196fd01faa4234a4b2cabadb5f4cb16edeef1)
2020-07-07 12:06:12 +02:00
akallabeth
757b4106e6
Updated version information for 2.2.0 release
2020-07-07 10:56:21 +02:00
Armin Novak
3cdfe18da9
Fixed urbdrc device path
...
(cherry picked from commit 63747000982f70bc169ff037bccb1bbcfd697747)
2020-07-07 10:44:12 +02:00
Armin Novak
28d878681d
Fixed bDeviceClass check in udev_init
...
Use the proper constant 0xef (Miscellaneous) instead of
0xfe (Application Specific)
See https://www.usb.org/defined-class-codes
(cherry picked from commit b97cb4c95dd085142cadf1645505264632d1af21)
2020-07-07 10:44:12 +02:00
akallabeth
252c793c01
Replaced malloc in urbdrc channel
...
(cherry picked from commit 3ae6feeebe8638c3bea76fd270f3fd46ee768ff2)
2020-07-07 10:44:12 +02:00
akallabeth
059c4ed46d
Fixed discrepancy in string descriptor default
...
(cherry picked from commit 747513d901ae50c8223a5ddd5b447436bb782a66)
2020-07-07 10:44:12 +02:00
akallabeth
effbc11867
Replaced memset in urbdrc
...
(cherry picked from commit e84c3829bf942b28cd6ef4d7cff4d5f8cca8a5f8)
2020-07-07 10:44:12 +02:00
akallabeth
7f8d7762e6
Unified logging for urbdrc libusb wrapper
...
(cherry picked from commit a81001c3a33818561bf0e6193e219b1b3245391d)
2020-07-07 10:44:12 +02:00
akallabeth
32004a50fe
Initialize variable in func_instance_id_generate
...
(cherry picked from commit a4a4992750085367e52623209c94ed3f1c66b25b)
2020-07-07 10:44:12 +02:00
akallabeth
e1cacc0762
Improved error log for string descriptor read issues
...
(cherry picked from commit dd2589cebcac5b39c6af9bbe9f444f6451e9ad4b)
2020-07-07 10:44:12 +02:00
akallabeth
40a29037df
Reverted check for short usb descriptor
...
(cherry picked from commit 6ba67a07beeb44878912851cf6ed6c6bf7443e09)
2020-07-07 10:44:11 +02:00
akallabeth
de5c013e37
Added compile time urbdrc debug option
...
(cherry picked from commit 5244efadcfb158c813d79b8e8c068fc33198f79b)
2020-07-07 10:44:11 +02:00
akallabeth
f621d2efea
Dump USB channel data with log-level trace
...
(cherry picked from commit e32ba76deb8e16834a5bb0d099cc08d1ed44c04d)
2020-07-07 10:44:11 +02:00
Kobi Mizrachi
01f7644e4c
server: proxy: proxy rdp heartbeats
...
(cherry picked from commit 659e4c772bbc7e3807dc94628934e8982f8efcf7)
2020-07-07 09:59:41 +02:00
Kobi Mizrachi
db2d8b11e9
libfreerdp: core: add ServerHeartbeat callback
...
(cherry picked from commit 2096ede5cc8caa209c532438e3a1173f6b47e2c4)
2020-07-07 09:59:41 +02:00
Armin Novak
7c638a3bb2
Moved pthread non portable function checks before ASAN
...
(cherry picked from commit 4d529f6f952c3632e13ba43261c263e5b83eca68)
2020-07-06 15:40:03 +02:00
Armin Novak
db7f73f9ae
Refined asan checks
...
Find threads before ASAN checks as for android builds the check
might fail if done afterward.
(cherry picked from commit 44f2e869820c9a33e8875982d20e9bb561736ce1)
2020-07-06 14:26:52 +02:00
akallabeth
68238db25c
Removed unnecessary checks for asan
...
check_c_compiler_flag is unreliable, only use where absolutely
necessary.
(cherry picked from commit 7864a985d48f0fba4d431b196464f2075ebacd4b)
2020-07-06 11:55:47 +02:00
Kobi Mizrachi
f6cbe92b94
rail: server: rename rail_send_pdu -> rail_server_send_pdu
...
(cherry picked from commit ec06a98e84690a9cf64d080145b71ca9a2e084fa)
2020-07-06 11:15:37 +02:00
Kobi Mizrachi
cf6be7f6d4
rail_common.c: Fix rail_get_order_type_string
...
(cherry picked from commit 5438b94c979728feeccd13374c77c4881eda8137)
2020-07-06 11:15:31 +02:00
Kobi Mizrachi
7f10a9261c
rail: server: mark rail_send_pdu as static function
...
(cherry picked from commit c3b28e8bced83dd992854e18b8f82eef7af9e54d)
2020-07-06 11:15:25 +02:00
Armin Novak
894d926a29
Fixed #6335 : windows client title length
...
(cherry picked from commit dfbeeb1e16d61734319dd32d25ee12e8715a1bc1)
2020-07-06 11:14:35 +02:00
akallabeth
0c58e0b6dc
Added hint for errors due to missing offscreen-cache
...
(cherry picked from commit 57e7a99393fd3db79cd2a78e6a447aaf2540c521)
2020-07-06 11:14:05 +02:00
akallabeth
6565326bcd
Use CMake to detect availability of getlogin_r
...
(cherry picked from commit 3a5bfd2bd0eee134dbac4a98dcb3ed5227a8c6dc)
2020-07-06 11:13:51 +02:00
Armin Novak
abf598b086
Fixed uninitialized value
...
(cherry picked from commit dc112d19355491f1b5e23631c15c5d960746bfac)
2020-07-06 11:13:45 +02:00
akallabeth
cb03d8701d
Filter GSM codec for microphone redirection
...
(cherry picked from commit c5984ff811f40b0382a251e76fc5f3690339f80a)
2020-07-06 11:13:26 +02:00
Pascal Nowack
b898786263
nsc: Fix memory leak
...
Fixes the following memory leak:
==115716== 16,662,960 bytes in 459 blocks are definitely lost in loss record 3,504 of 3,504
==115716== at 0x48396AF: malloc (vg_replace_malloc.c:306)
==115716== by 0x4C6A4E2: nsc_context_initialize_encode (nsc_encode.c:77)
==115716== by 0x4C6A4E2: nsc_compose_message (nsc_encode.c:497)
(cherry picked from commit 9bd457405095c94a24175bc54bd99947fcf6a33d)
2020-06-29 08:13:05 +02:00
Armin Novak
524061ab88
Fixed creating release zip from folder
...
(cherry picked from commit 16350dcdda73767c7012a2c8f09405944b39d09a)
2020-06-26 11:02:03 +02:00
Armin Novak
62530e2d9d
Fixed #6298 : Mask CACHED_BRUSH when checking brush style
...
(cherry picked from commit ce1a9d8d1969ecbb4d24b9f4812654638a44abc2)
2020-06-26 11:01:45 +02:00
Armin Novak
ed4276108f
Fixed spelling, print errors to stderr
...
(cherry picked from commit b50525d1fb47aa6b07450c10f8ad7b5245e523fa)
2020-06-26 11:01:30 +02:00
Armin Novak
0bdda779b7
Fixed bug with creating release source_version
...
(cherry picked from commit 5490ce50992716d9230bd3ac84b3e819f1c5649f)
2020-06-26 11:01:23 +02:00
Martin Fleisz
584efae073
Merge pull request #6285 from akallabeth/stable-backports2
...
Stable backports
2.1.2
2020-06-22 12:44:36 +02:00
Armin Novak
93bed51ae2
Updated versions to 2.1.2
2020-06-22 12:26:08 +02:00
Armin Novak
96333fd722
Added changelog for 2.1.2
...
(cherry picked from commit 5dc50f64183755862cca75cf151933c42fabbb90)
2020-06-22 12:14:10 +02:00
akallabeth
cb2adc84c0
Fixed possible integer overflow in crypto_rsa_common
...
Thanks @anticomputer for pointing this out
(cherry picked from commit 02c5ec66e5b47fe4cf2fc96e2cd387a18e3f2bb6)
2020-06-22 12:14:04 +02:00
akallabeth
813204554d
Fixed fallback to getlogin for android
...
(cherry picked from commit caff01877d4df5f25a983b3aa5e57dde6a16a62f)
2020-06-22 12:13:56 +02:00
akallabeth
67ffded1ba
Removed duplicate semicolon
...
(cherry picked from commit 308c2c3544763873a5bea4d18c72c9f62e1584cb)
2020-06-22 12:13:50 +02:00
akallabeth
de3dab1a7d
Fixed OOB read in ntlm_av_pair_get
...
CVE-2020-11097 thanks to @antonio-morales for finding this.
(cherry picked from commit 58a3122250d54de3a944c487776bcd4d1da4721e)
2020-06-22 12:13:41 +02:00
akallabeth
eb1cf9a2ac
Fixed broken const variable.
...
(cherry picked from commit 1c6a6923f87dcfb295c508963f21bebbbc4292ae)
2020-06-22 12:13:31 +02:00
akallabeth
724ceade0f
Reset freed HGDI_DC
...
CVE-2020-4031 thanks to @antonio-morales for finding this.
(cherry picked from commit f753c25ad3d5dae7890fe73cfb3c091c015d97ed)
2020-06-22 12:13:20 +02:00