GitLab

This patch is in response to the following security vulnerabilities
(CVEs) reported to NVIDIA against libvdpau:

CVE-2015-5198
CVE-2015-5199
CVE-2015-5200

To address these CVEs, this patch:

- replaces all uses of getenv(3) with secure_getenv(3);
- uses secure_getenv(3) when available, with a fallback option;
- protects VDPAU_DRIVER against directory traversal by checking for '/'

On platforms where secure_getenv(3) is not available, the C preprocessor
will print a warning at compile time. Then, a preprocessor macro will
replace secure_getenv(3) with our getenv_wrapper(), which utilizes the check:

  getuid() == geteuid() && getgid() == getegid()

See getuid(2) and getgid(2) for further details.
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>
Reviewed-by: Florian Weimer <fweimer@redhat.com>

Signed-off-by: Bibhuti Bhushan Prusty <bprusty@nvidia.com>
Reviewed-by: José Hiram Soltren <jsoltren@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>

vdpau_trace.cpp: In function 'void _vdp_cap_dump_video_mixer_attribute_value(VdpVideoMixerAttribute, const void*, bool)':
vdpau_trace.cpp:539:48: error: cast from type 'const void*' to type 'const float (**)[3][4]' casts away qualifiers [-Werror=cast-qual]
                 ptr = *(VdpCSCMatrix const * *)value;
                                                ^
vdpau_trace.cpp: In function 'void _vdp_cap_dump_bitstream_buffer_list(uint32_t, const VdpBitstreamBuffer*)':
vdpau_trace.cpp:1175:52: error: cast from type 'const void* const' to type 'uint8_t* {aka unsigned char*}' casts away qualifiers [-Werror=cast-qual]
             uint8_t * ptr = (uint8_t * )buffers[0].bitstream;
                                                    ^
Signed-off-by: Robert Morell <rmorell@nvidia.com>
Reviewed-by: Stephen Warren <swarren@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>

The following three were never a part of the public API and as such
should have never been exported by libvdpau_trace.so

Correct that by marking them as static, thus allowing the compiler
to hide them from the exported namespace.

_vdp_cap_init_planes_adapt_surface_video
_vdp_cap_init_planes_adapt_surface_bitmap
_vdp_cap_init_planes_adapt_surface_output
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
Reviewed-by: Aaron Plattner <aplattner@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>

Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
Reviewed-by: Aaron Plattner <aplattner@nvidia.com>
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>

Nothing actually uses VdpPoint, so this tracing function was never called.  I
left the VdpPoint type in vdpau.h for now, just in case anyone actually uses it
themselves.
Signed-off-by: Aaron Plattner <aplattner@nvidia.com>

Signed-off-by: Aaron Plattner <aplattner@nvidia.com>

Signed-off-by: Aaron Plattner <aplattner@nvidia.com>

Add profiles for MPEG-4 part 2, DivX 4, and DivX 5.  Also add new high quality
scaling options.

I forgot to include this change in commit
1290f7c1.