Stefan Dirsch
3c0ea2b4ad
libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files. See CVE-2015-5198, CVE-2015-5199, and CVE-2015-5200 for more details. This release uses the secure_getenv() function, when available, to fix these problems. The updated libvdpau will instead use a fallback implementation of secure_getenv() when the platform doesn't provide one. If you use the NVIDIA .run installer packages, please see https://devtalk.nvidia.com/default/topic/873035 for additional information. This release also adds tracing of HEVC picture structures to libvdpau_trace. - supersedes patch: libvdpau-nopdftex.patch OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libvdpau?expand=0&rev=4
DEBUGGING AND TRACING
The VDPAU wrapper library supports tracing VDPAU function calls, and their
parameters. This tracing is controlled by the following environment variables:
VDPAU_TRACE
Enables tracing. Set to 1 to trace function calls. Set to 2 to trace all
arguments passed to the function.
VDPAU_TRACE_FILE
Filename to write traces to. By default, traces are sent to stderr. This
variable may either contain a plain filename, or a reference to an
existing open file-descriptor in the format "&N" where N is the file
descriptor number.
The VDPAU wrapper library is responsible for determining which vendor-specific
driver to load for a given X11 display/screen. At present, it hard-codes
"nvidia" as the driver. The environment variable VDPAU_DRIVER may be set to
override this default. The actual library loaded will be
libvdpau_${VDPAU_DRIVER}.so. Setting VDPAU_DRIVER to "trace" is not advised.