Refresh stable-2.0 base: rebase WSLg patches from FreeRDP 2.4.0 onto current upstream stable-2.0 (2.11.8-dev + CVE-2026-24684)#8

Draft

benhillis wants to merge 531 commits into

user/benhill/freerdp-stable-2.0-refresh

This pull request is big! We're only showing the most recent 250 commits

Commits on Oct 20, 2022

Improve OpenSSL provider loading
akallabeth
committed
Added missing include
akallabeth
committed
Added missing return in winpr_Digest_New

akallabeth
authored and
hardening
committed

Commits on Oct 24, 2022

Check for NULL pointer in winpr_Digest_Free

fifthdegree
authored and
akallabeth
committed
Added support for audin version 2
akallabeth
committed
Updated changelog
akallabeth
committed

Commits on Oct 27, 2022

Fixed compile error for old openssl
akallabeth
committed

Commits on Nov 7, 2022

Commits on Nov 14, 2022

Commits on Nov 16, 2022

Commits on Nov 21, 2022

Fix connection negotiation with mstsc/msrdc

spronovo
authored and
pnowack
committed

Commits on Nov 22, 2022

[channels,printer] Fixed reference counting
akallabeth
committed

Commits on Nov 23, 2022

Commits on Dec 7, 2022

[channel,urbdrc] fix type of usb hotplug callback
akallabeth
committed

Commits on Dec 13, 2022

[client,x11] Fixed #8099: Detect key autorepeat
akallabeth
committed

Commits on Dec 14, 2022

[core,info] enforce extended info limits

akallabeth
authored and
pnowack
committed
[core,info] enforce cbClientDir limits

akallabeth
authored and
pnowack
committed
[core,info] ensure stream length

akallabeth
authored and
pnowack
committed
[core,info] improve rdp_read_info_null_string

akallabeth
authored and
pnowack
committed

Commits on Dec 15, 2022

[build] add channel path to RPATH
akallabeth
committed

Commits on Dec 16, 2022

[build] add missing link targets for BUILTIN_CHANNELS

Hans-Peter Jansen
authored and
akallabeth
committed
[build] add cmake definition `WITH_PLUGIN_RPATH_ONLY`

Hans-Peter Jansen
authored and
akallabeth
committed

Commits on Dec 22, 2022

revert changes so that the osmajortype/osminortype is not overwritten

DVeron-RC
authored and
mfleisz
committed

Commits on Jan 3, 2023

Commits on Jan 11, 2023

[uwac] do not use iso C functions

Armin Novak
authored and
akallabeth
committed
[winpr,ntlm] fix NTOWFvxxxA functions

Armin Novak
authored and
akallabeth
committed
[winpr,sam] fix inalid NULL arguments

Armin Novak
authored and
akallabeth
committed

Commits on Jan 13, 2023

uwac/input: Set the right serial when setting cursor

jadahl
authored and
akallabeth
committed
uwac/input: Don't pass hotspot as offset when attaching cursor buffer

jadahl
authored and
akallabeth
committed

Commits on Jan 18, 2023

Fix incompatible function pointer types

kraj
authored and
akallabeth
committed

Commits on Feb 8, 2023

[build,android] only use CMake from SDK

Armin Novak
authored and
mfleisz
committed

Commits on Feb 16, 2023

Commits on Feb 22, 2023

Fix #8702: Disable sha3 and shake hashes for libressl

akallabeth
authored and
mfleisz
committed

Commits on Mar 10, 2023

Fixed #8686: Update h264 to use new FFMPEG API
akallabeth
committed
Update Changelog

pnowack
authored and
akallabeth
committed
ci: Build linux builds with WITH_GSSAPI=OFF

pnowack
authored and
akallabeth
committed

Commits on Mar 14, 2023

early bail from update_read_window_state_order when handling WINDOW_ORDER_FIELD_WND_RECTS breaks subsequent protocol parsing

byteboon
authored and
akallabeth
committed
changelog

Armin Novak
authored and
akallabeth
committed

Commits on Mar 16, 2023

packaging/rpm: Enable FFmpeg support on Fedora 36+ and RHEL 9+

Conan-Kudo
authored and
akallabeth
committed

Commits on Apr 20, 2023

rdpecam/server: Remove wrong assertion

pnowack
authored and
akallabeth
committed
Update changelog

pnowack
authored and
akallabeth
committed

Commits on May 22, 2023

[libfreerdp] add bound check in gdi_SolidFill

starhcq
authored and
akallabeth
committed
[libfreerdp] add null pointer check in planar_decompress()

starhcq
authored and
akallabeth
committed
[libfreerdp] add bound check in gdi_surface_bits()

starhcq
authored and
akallabeth
committed
changelog
akallabeth
committed

Commits on Jun 5, 2023

[channels,rdpdr] enforce client state checks

akallabeth
authored and
mfleisz
committed
[channel,rdpdr] use wLog* for client logging

Armin Novak
authored and
mfleisz
committed
changelog

akallabeth
authored and
mfleisz
committed

Commits on Jul 3, 2023

Commits on Jul 10, 2023

fix ffmpeg source tarball url

linsui
authored and
akallabeth
committed

Commits on Jul 21, 2023

channels/cliprdr: Fix writing incorrect PDU type for unlock PDUs

pnowack
authored and
akallabeth
committed
Update changelog

pnowack
authored and
akallabeth
committed

Commits on Aug 4, 2023

[codec,rfx] fix possible out of bound read
akallabeth
committed

Commits on Aug 21, 2023

[codec,nsc] fix missing plane length check

Armin Novak
authored and
mfleisz
committed
[codec,rfx] free content of currentMessage on fail

Armin Novak
authored and
mfleisz
committed
[coded,rfx] check indices are within range

Armin Novak
authored and
mfleisz
committed
[codec,color] fix freerdp_image_fill

Armin Novak
authored and
mfleisz
committed

Commits on Aug 22, 2023

[warnings] fix integer multiplications

akallabeth
authored and
mfleisz
committed
fix [client/Mac]: ninja build

bmiklautz
authored and
akallabeth
committed
fix [client/Mac]: ninja build

bmiklautz
authored and
akallabeth
committed
Renamed planar ALIGN macro to avoid name collission on osx
akallabeth
committed
[cmake] backport options
akallabeth
committed
[codec,rfx] fix missing brace from broken backport
akallabeth
committed
[cmake] update FindOpenSSL
akallabeth
committed
[ci] add code quality preload files

Armin Novak
authored and
akallabeth
committed
[winpr,credui] disable tests on windows
akallabeth
committed
[codec,nsc] ensure integer width
akallabeth
committed

Commits on Aug 25, 2023

[codec,progressive] fix missing destination checks

akallabeth
authored and
mfleisz
committed
[codec,clear] fix missing bounds checks

akallabeth
authored and
mfleisz
committed

Commits on Aug 28, 2023

[codec,nsc] fix input length validation

akallabeth
authored and
mfleisz
committed
[codec,zgfx] fix cBitsRemaining calculation

akallabeth
authored and
mfleisz
committed
[core,orders] fix checks for multi opaque rect

Armin Novak
authored and
mfleisz
committed
[codec,ncrush] fix index checks

akallabeth
authored and
mfleisz
committed
Proper pointer event handling for wayland
akallabeth
committed
Increased UWAC version
akallabeth
committed
Added pointer source events
akallabeth
committed
Added pointer frame events
akallabeth
committed
Updated changelog
akallabeth
committed
[release] update version
akallabeth
committed
[codec] encode messages considering endianness

Joan Torres
authored and
akallabeth
committed
[libfreerdp] fix endianness issues

Joan Torres
authored and
akallabeth
committed
Updated changelog
akallabeth
committed

Commits on Sep 11, 2023

[winpr,collections] implement duplication for wArrayList
akallabeth
committed

Commits on Sep 20, 2023

Commits on Sep 26, 2023

[client,cmdline] Advertise Image RFX GUID when rfx-mode:image

metalefty
authored and
akallabeth
committed

Commits on Oct 17, 2023

Fix #9469: Disable WITH_MEDIAFOUNDATION by default

akallabeth
authored and
mfleisz
committed

Commits on Nov 2, 2023

[channels,rdpdr] fix user loggedon handling

Armin Novak
authored and
mfleisz
committed

Commits on Nov 3, 2023

Commits on Nov 15, 2023

the default Swiss keyboard layout is German, French is a variant

kbucheli
authored and
akallabeth
committed
[channel,rdpdr] use server general caps

Armin Novak
authored and
akallabeth
committed
[channel,rdpdr] relax state checks

Armin Novak
authored and
akallabeth
committed

Commits on Nov 20, 2023

[codec,aac] add NaN filter
akallabeth
committed

Commits on Nov 21, 2023

crypto: Don't rely on OpenSSL 1.1.x symbols

AlessandroBono
authored and
akallabeth
committed

Commits on Nov 24, 2023

[rdpdr] fix broken backport

Armin Novak
authored and
akallabeth
committed

Commits on Dec 4, 2023

fixed clang-format

Armin Novak
authored and
akallabeth
committed

Commits on Dec 7, 2023

[channels,rdpdr] fix #9610
akallabeth
committed

Commits on Dec 11, 2023

[winpr,crt] fix ICU string convert

Armin Novak
authored and
akallabeth
committed

Commits on Dec 14, 2023

changelog
akallabeth
committed
update release version to 2.11.3
akallabeth
committed
next development version 2.11.4-dev
akallabeth
committed
winpr: Fix typo, that led to a compilation error
pnowack
committed
update changelog

Armin Novak
authored and
akallabeth
committed
release-2.11.4

Armin Novak
authored and
akallabeth
committed
start 2.11.5-dev cycle

Armin Novak
authored and
akallabeth
committed

Commits on Jan 9, 2024

[deprecation] use new openssl API
akallabeth
committed
[codec,progressive] prevent write at NULL

alega-kas
authored and
akallabeth
committed

Commits on Jan 12, 2024

[channels,rdpsnd] fix missing include
akallabeth
committed

Commits on Jan 16, 2024

[codec,planar] check resolution for overflow

Armin Novak
authored and
akallabeth
committed

Commits on Jan 19, 2024

Commits on Apr 17, 2024

Commits on Apr 19, 2024

[codec,interleaved] fix bounds checks
akallabeth
committed

Commits on Apr 22, 2024

Commits on May 22, 2024

X11: fix pointer/integer type mismatch
floppym
committed

Commits on May 23, 2024

Commits on Aug 8, 2024

Commits on Oct 25, 2024

[core] eliminate rdpRdp::instance
akallabeth
committed

Commits on Oct 28, 2024

fix [core]: 'invalid hHandle' errors

bmiklautz
authored and
akallabeth
committed

Commits on Nov 25, 2024

Commits on Nov 28, 2024

[winpr,pubsub] add NULL parameter checks
akallabeth
committed

Commits on Dec 2, 2024

Merge pull request #10898 from akallabeth/oldstable-pubsub
bmiklautz
authored

Commits on Aug 20, 2025

Commits on Feb 23, 2026

Commits on Feb 24, 2026

changelog & release 2.11.8
akallabeth
committed

Commits on Feb 25, 2026

Merge pull request #12351 from akallabeth/release-2.x-last
akallabeth
authored

Commits on Mar 19, 2026

Commits on Apr 22, 2026

[codec,nsc] limit copy area in nsc_process_message

akallabeth
authored and
vulgraph
committed
[codec,nsc] bounds checks and doxygen

akallabeth
authored and
vulgraph
committed
Merge pull request #12656 from vulgraph/backport/CVE-2026-31806-stable-2.0
akallabeth
authored
[channels,urbdrc] cancel all usb transfers on channel close

akallabeth
authored and
vulgraph
committed
[client,x11] fix xf_rail_window_common cleanup

akallabeth
authored and
vulgraph
committed
Merge pull request #12658 from vulgraph/backport/CVE-2026-24681-stable-2.0
akallabeth
authored
Merge pull request #12659 from vulgraph/backport/CVE-2026-26986-stable-2.0
akallabeth
authored
[core,info] fix missing NULL check

akallabeth
authored and
vulgraph
committed
Merge pull request #12660 from vulgraph/backport/CVE-2026-23948-stable-2.0
akallabeth
authored
[client,X11] fix clipboard update

akallabeth
authored and
vulgraph
committed

Commits on Apr 23, 2026

[core,orders] improve input validation

akallabeth
authored and
vulgraph
committed
Merge pull request #12661 from vulgraph/backport/CVE-2026-25997-stable-2.0
akallabeth
authored
Merge pull request #12662 from vulgraph/backport/CVE-2026-29776-stable-2.0
akallabeth
authored
[codec,clear] fix destination checks

akallabeth
authored and
vulgraph
committed
[codec,planar] fix missing destination bounds checks

akallabeth
authored and
vulgraph
committed
[codec,h264] validate rectangles before use

akallabeth
authored and
vulgraph
committed
[channels,urbdrc] ensure InterfaceNumber is within range

akallabeth
authored and
vulgraph
committed
Merge pull request #12665 from vulgraph/backport/CVE-2026-26955-stable-2.0
akallabeth
authored
Merge pull request #12667 from vulgraph/backport/CVE-2026-26965-stable-2.0
akallabeth
authored
[codec,clear] Update CLEAR_GLYPH_ENTRY::count after alloc

akallabeth
authored and
vulgraph
committed
Merge pull request #12668 from vulgraph/backport/CVE-2026-29774-stable-2.0
akallabeth
authored
Merge pull request #12669 from vulgraph/backport/CVE-2026-24679-stable-2.0
akallabeth
authored
Merge pull request #12670 from vulgraph/backport/CVE-2026-33985-stable-2.0
akallabeth
authored
[codec,progressive] Fail progressive_rfx_quant_sub on invalid values

akallabeth
authored and
vulgraph
committed
[core,gateway] Check rpcconn_common_hdr_t::auth_length is valid

akallabeth
authored and
vulgraph
committed
[codec,planar] add early length check to avoid oob read

akallabeth
authored and
vulgraph
committed
[codec,dsp] fix IMA ADPCM sample clamping

akallabeth
authored and
vulgraph
committed
Merge pull request #12671 from vulgraph/backport/CVE-2026-33983-stable-2.0
akallabeth
authored
Merge pull request #12672 from vulgraph/backport/CVE-2026-33952-stable-2.0
akallabeth
authored
Merge pull request #12673 from vulgraph/backport/CVE-2026-31897-stable-2.0
akallabeth
authored
Merge pull request #12675 from vulgraph/backport/CVE-2026-33977-stable-2.0
akallabeth
authored
[core,info] fix missing check in rdp_write_logon_info_v1

akallabeth
authored and
vulgraph
committed
Merge pull request #12676 from vulgraph/backport/CVE-2024-32661-stable-2.0
akallabeth
authored

Commits on Apr 24, 2026

[codec,dsp] add format checks

akallabeth
authored and
vulgraph
committed
[codec,dsp] fix array bounds checks

akallabeth
authored and
vulgraph
committed

Commits on Apr 25, 2026

Commits on May 1, 2026

Commits on May 3, 2026

[channels,rdpsnd] terminate thread before free
vulgraph
committed
[cache,bitmap] overallocate bitmap cache
vulgraph
committed

Commits on May 4, 2026

Commits on May 19, 2026

channels/server: port WSLg gfxredir support and AF_VSOCK listener

committed
add Hebrew (Standard) keyboard layout ID (#3)

authored and
benhillis
committed
Microsoft mandatory file

authored and
benhillis
committed