From jr@opal.com  Fri Dec 14 15:35:21 2007
Return-Path: <jr@opal.com>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C93FB16A47A
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 14 Dec 2007 15:35:21 +0000 (UTC)
	(envelope-from jr@opal.com)
Received: from smtp.vzavenue.net (smtp.vzavenue.net [66.171.59.140])
	by mx1.freebsd.org (Postfix) with ESMTP id 492EA13C46A
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 14 Dec 2007 15:35:21 +0000 (UTC)
	(envelope-from jr@opal.com)
Received: from 98.79.171.66.subscriber.vzavenue.net (HELO homobox.opal.com) ([66.171.79.98])
  by smtp.vzavenue.net with ESMTP; 14 Dec 2007 10:35:19 -0500
Received: from linwhf.opal.com (localhost [127.0.0.1])
	by homobox.opal.com (8.13.8/8.13.8) with ESMTP id lBEFZIkD075093
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 14 Dec 2007 10:35:19 -0500 (EST)
	(envelope-from jr@opal.com)
Received: from linwhf.opal.com ([192.168.3.65] helo=linwhf.opal.com) by
	ASSP-nospam; 14 Dec 2007 10:35:18 -0500
Received: from linwhf.opal.com (localhost [127.0.0.1])
	by linwhf.opal.com (8.14.2/8.14.2) with ESMTP id lBEFZIov001351
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 14 Dec 2007 10:35:18 -0500 (EST)
	(envelope-from jr@opal.com)
Received: (from jr@localhost)
	by linwhf.opal.com (8.14.2/8.14.2/Submit) id lBEFZIEu001350;
	Fri, 14 Dec 2007 10:35:18 -0500 (EST)
	(envelope-from jr)
Message-Id: <200712141535.lBEFZIEu001350@linwhf.opal.com>
Date: Fri, 14 Dec 2007 10:35:18 -0500 (EST)
From: "J.R. Oldroyd" <fbsd@opal.com>
Reply-To: "J.R. Oldroyd" <fbsd@opal.com>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: vty change causes xorg mousebuffer paste
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         118694
>Category:       ports
>Synopsis:       vty change causes x11/xorg mousebuffer paste
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-x11
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Dec 14 15:40:01 UTC 2007
>Closed-Date:    Thu Mar 13 14:07:09 UTC 2008
>Last-Modified:  Thu Mar 13 14:10:04 UTC 2008
>Originator:     J.R. Oldroyd
>Release:        FreeBSD 7.0-BETA4 i386
>Organization:
>Environment:
System: FreeBSD linwhf.opal.com 7.0-BETA4 FreeBSD 7.0-BETA4 #3: Mon Dec 10 17:12:34 EST 2007 xx@yy:/usr/src/sys/i386/compile/LINWHF i386
>Description:
When changing vtys using Ctrl-Atl-F1 then back to xorg using
Ctrl-Alt-F9, whatever text was most recently selected in the
mousebuffer is pasted back on the return to the xorg vty.

This is dangerous (and a potential security threat) as a command
could be executed when it is not expected.

System:
	FreeBSD-7.0BETA4
	xorg-7.3_1

>How-To-Repeat:
	start xorg
	open an xterm window
	use LEFT mouse button to select some text
	type Ctrl-Alt-F1 to switch to console vty
	type Ctrl-Alt-F9 to switch back to xorg
	observe that the previously selected text is now pasted
>Fix:
This error and a patch have been posted to the xorg bugs system.  Please
add the patch to the FreeBSD port.

https://bugs.freedesktop.org/show_bug.cgi?id=13144

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->freebsd-x11 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Fri Dec 14 17:29:14 UTC 2007 
Responsible-Changed-Why:  
Over to maintainer(s). 

http://www.freebsd.org/cgi/query-pr.cgi?pr=118694 

From: "J.R. Oldroyd" <fbsd@opal.com>
To: bug-followup@FreeBSD.org, fbsd@opal.com
Cc:  
Subject: Re: ports/118694: vty change causes xorg mousebuffer paste
Date: Fri, 14 Dec 2007 19:35:53 -0500

 To clarify, the patch proposed at freedesktop.org is a patch
 that will drop into our x11-drivers/xf86-input-mouse port to
 fix this problem.
State-Changed-From-To: open->closed 
State-Changed-By: flz 
State-Changed-When: Jeu 13 mar 2008 14:07:08 UTC 
State-Changed-Why:  
Committed. Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=118694 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/118694: commit references a PR
Date: Thu, 13 Mar 2008 14:06:58 +0000 (UTC)

 flz         2008-03-13 14:06:52 UTC
 
   FreeBSD ports repository
 
   Modified files:
     x11-drivers/xf86-input-mouse Makefile 
   Added files:
     x11-drivers/xf86-input-mouse/files 
                                        patch-dont-flush-buttons-6a03e8bd 
   Log:
   Add patch to fix possibly insecure mouse behavior when switching VT.
   
   PR:             ports/118694
   Submitted by:   J.R. Oldroyd <fbsd@opal.com>
   Obtained from:  fd.o xorg/driver/xf86-input-mouse repository
   Commit id:      6a03e8bd9699a33dabcdd2bbcf51a001ddfd5534
   
   Revision  Changes    Path
   1.4       +1 -0      ports/x11-drivers/xf86-input-mouse/Makefile
   1.1       +38 -0     ports/x11-drivers/xf86-input-mouse/files/patch-dont-flush-buttons-6a03e8bd (new)
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
>Unformatted:
