When changing vtys using Ctrl-Atl-F1 then back to xorg using Ctrl-Alt-F9, whatever text was most recently selected in the mousebuffer is pasted back on the return to the xorg vty. This is dangerous (and a potential security threat) as a command could be executed when it is not expected. System: FreeBSD-7.0BETA4 xorg-7.3_1 Fix: This error and a patch have been posted to the xorg bugs system. Please add the patch to the FreeBSD port. https://bugs.freedesktop.org/show_bug.cgi?id=13144 How-To-Repeat: start xorg open an xterm window use LEFT mouse button to select some text type Ctrl-Alt-F1 to switch to console vty type Ctrl-Alt-F9 to switch back to xorg observe that the previously selected text is now pasted
Responsible Changed From-To: freebsd-ports-bugs->freebsd-x11 Over to maintainer(s).
To clarify, the patch proposed at freedesktop.org is a patch that will drop into our x11-drivers/xf86-input-mouse port to fix this problem.
flz 2008-03-13 14:06:52 UTC FreeBSD ports repository Modified files: x11-drivers/xf86-input-mouse Makefile Added files: x11-drivers/xf86-input-mouse/files patch-dont-flush-buttons-6a03e8bd Log: Add patch to fix possibly insecure mouse behavior when switching VT. PR: ports/118694 Submitted by: J.R. Oldroyd <fbsd@opal.com> Obtained from: fd.o xorg/driver/xf86-input-mouse repository Commit id: 6a03e8bd9699a33dabcdd2bbcf51a001ddfd5534 Revision Changes Path 1.4 +1 -0 ports/x11-drivers/xf86-input-mouse/Makefile 1.1 +38 -0 ports/x11-drivers/xf86-input-mouse/files/patch-dont-flush-buttons-6a03e8bd (new) _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: open->closed Committed. Thanks!