Fixed OOB read in ntlm_av_pair_get

CVE-2020-11097 thanks to @antonio-morales for finding this.

(cherry picked from commit 58a3122250d54de3a944c487776bcd4d1da4721e)

Fixed broken const variable.

(cherry picked from commit 1c6a6923f87dcfb295c508963f21bebbbc4292ae)

Reset freed HGDI_DC

CVE-2020-4031 thanks to @antonio-morales for finding this.

(cherry picked from commit f753c25ad3d5dae7890fe73cfb3c091c015d97ed)

Fixed out of bound read in RLEDECOMPRESS

CVE-2020-4033 thanks to @antonio-morales for finding this.

(cherry picked from commit 0a98c450c58ec150e44781c89aa6f8e7e0f571f5)

Fixed OOB read in update_recv_secondary_order

CVE-2020-4032 thanks to @antonio-morales for finding this.

(cherry picked from commit e7bffa64ef5ed70bac94f823e2b95262642f5296)

Fixed TrioParse and trio_length limts.

CVE-2020-4030 thanks to @antonio-morales for finding this.

(cherry picked from commit 05cd9ea2290d23931f615c1b004d4b2e69074e27)

Fixed OOB read in update_read_cache_bitmap_v3_order

CVE-2020-11096 thanks @antonio-morales for finding this.

(cherry picked from commit b8beb55913471952f92770c90c372139d78c16c0)

Fixed invalid access in update_recv_primary_order

CVE-2020-11095 thanks @antonio-morales for finding this.

(cherry picked from commit 733ee3208306b1ea32697b356c0215180fc3f049)

Use localtime_s on windows

(cherry picked from commit c3a1ed780cc4aed639e3391d7cafb9edc9dc623c)

Replaced gmtime with gmtime_r

(cherry picked from commit a45afe9db77a19e5a177fe1dc3e85119013f9587)

Fixed codition with side effects

(cherry picked from commit 1a02af5a12b400fcb6ad121a0a71e4440c2e9152)

Fixed pcap cleanup

(cherry picked from commit 3ac7bb5d6a743b19e8686410d5ec6dcf74869ebe)

Fixed double free

(cherry picked from commit 6d86e20e1e7caaab4f0c7f89e36d32914dbccc52)

Replaced getlogin with getlogin_r

(cherry picked from commit 36478d3d0b3d7fa378a875f60170a08e94747226)

Replaced localtime with localtime_r

(cherry picked from commit 240fdd07b123594a1f7a460de7e6877b1963d09e)

Fixed memory leaks in ntlm

(cherry picked from commit 057b6df4aebbe8e739139087dfaab15104ca5ba7)

Fixed Out-of-bound read in glyph_cache_put

CVE-2020-11098 thanks to @antonio-morales for finding this.

(cherry picked from commit c0fd449ec0870b050d350d6d844b1ea6dad4bc7d)

Fixed OOB Read in license_read_new_or_upgrade_license_packet

CVE-2020-11099 thanks to @antonio-morales for finding this.

(cherry picked from commit 6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a)

Respect SECBUFFER_READONLY flag in NTLM EncryptMessage

(cherry picked from commit 8e45a2dd50d5db6ac6125e0f60e833b6c6c6ea1b)

Added missing SECBUFFER_READONLY flag in rpc_client_write_call

(cherry picked from commit 0d80353bf30de860dcf86285c4e5e2770bc036f7)

TSG improvements

* Respect connection timeout during connect
* Better debug output
* Cleaned up data types,

(cherry picked from commit ff79636d3311269ec35fc1d6cc4246eef500ad5e)

Fixed missing lock during buffer submit.

(cherry picked from commit c902f583d0911c1e8938c5f14f3f257eb9737745)

Revert "winpr/library: Use RTLD_GLOBAL for dlopen"

Using RTLD_GLOBAL in LoadLibraryA introduces a different behavior than
expected.

This reverts commit d566e00258daffcb4c703afc3685e9a42ad01453.

(cherry picked from commit 529e30c273ba67e3924b9fe4419410888314d31f)

fix [client channels]: move exported API calls to client/common

The functions mappedGeometryRef and mappedGeometryUnref are API
functions ([1]) but were implemented in the geometry channel.
In case FreeRDP was built with BUILTIN_CHANNELS=OFF those functions
weren't available globally but used by the video channel.

Now the functions are fixed part of the freerdp-client library and
therefore available for all channels.

[1] exported in freerdp/client/geometry.h

Fixes #6236

(cherry picked from commit 1628939227fa82fa492f068f178f0cc0a42c518b)

Fixed double free for uwac buffers

(cherry picked from commit 1bc48b058f013a8c88db2a1d7da2ad25dcd3bc4c)

Lock wayland buffer updates

(cherry picked from commit 7361f75d11b77f998cf7dee08c8aa619df98754a)

server: proxy: cap plugin: fix var and func declaration

(cherry picked from commit 0cf764f170384b1f65aa4950f54c668f8212ac11)

server: proxy: implement session capture plugin

(cherry picked from commit 19809bf338e5503a33664440d0de9313dca038a3)

winpr: image: add API to construct bmp header

(cherry picked from commit 920acd4c0ee7f9112d77756b0c41474212446609)

Fixed compilation issue with shadow pam code

(cherry picked from commit e1e0f965e8636c587aea7762a94d611e193e07f3)

Fixed surface locking for shadow server.

(cherry picked from commit a38d6c53a62cdea302fbeb4e466bce22c006d20c)

Do not remove transfer data on usb cancel transfer

(cherry picked from commit a5e2d62e48619d5502f5334d431ee7d66ae9e4aa)

Fixed double free in urb_isoch_transfer_cb

(cherry picked from commit ef4de12887486857f7eec37ef93df692b2ecedf0)

Fixed sign compare warnings with constants.

(cherry picked from commit 5ec66cc6c79dadf4c3426060d5bb30ddb360f292)

fix +unmap-buttons option having the opposite effect

(cherry picked from commit 4607a2766afd2875696b7b7febd9dc63f778b8d7)

Improve X11 shadow authentication reason failure log

(cherry picked from commit e66ee477c00b91cddc228adaf1577be602e4f725)

Fix usage of DsMakeSpn with IP address hostnames

(cherry picked from commit 4e7b60b0028f5d33139065fb965c5cd9d2f6ec1d)

MessageQueue write time to current message not the next

(cherry picked from commit ea4df3f91a63c17f6a9bbf8d1b54f462004a992c)

Fixed #6267: adjust write_pixel_16 endian handling

(cherry picked from commit 51d3e07c8a4bca32bf82538075e4518b63e8ed4d)

uwac: don't try to use O_TMPFILE on FreeBSD

Currently, this sets an invalid open flag and attempts to open(), which
will fail.  Instead of doing that, don't try to define O_TMPFILE where
such a definition can't exist and force the fallback rather than making
an always-fail open() call.

(cherry picked from commit 082ddb3d2bd068536c17a4dbddcafd465ffcba3a)

drdynvc: client: fix #6252 use-after-free

(cherry picked from commit 6ed765c96052c65f16fb1964705bd5c894b51b78)

Fixed formatting.

(cherry picked from commit d1b310d970592226b2f0a70710ad3ae3da61c4bc)

smartcard: Teoretical fix of uninitialized values

This tries to fixes the following defects reported by covscan tool:
 - channels/smartcard/client/smartcard_operations.c:958: uninit_use_in_call: Using uninitialized value "ret.cReaders" when calling "smartcard_pack_locate_cards_return".
 - channels/smartcard/client/smartcard_operations.c:932: uninit_use_in_call: Using uninitialized value "ret.cReaders" when calling "smartcard_pack_locate_cards_return".

But I am not sure about it...

(cherry picked from commit 53459883529bf659488c4da81c30707ff3662820)

smartcard: Fix usage of uninitialized values

This fixes the following defect reported by covscan tool:
 - channels/smartcard/client/smartcard_pack.c:942: uninit_use_in_call: Using uninitialized value "tmp" when calling "ConvertFromUnicode".
 - channels/smartcard/client/smartcard_pack.c:894: uninit_use_in_call: Using uninitialized value "tmp" when calling "ConvertFromUnicode".
 - channels/smartcard/client/smartcard_pack.c:475: uninit_use_in_call: Using uninitialized value "tmp" when calling "ConvertFromUnicode".

(cherry picked from commit e70e25715f89aac823281d7c0674d2387f70f8a6)

wlfreerdp: Fix array overrun

This fixes the following defects reported by covscan tool:
 - client/Wayland/wlf_input.c:251: overrun-local: Overrunning array "contacts" of 10 32-byte elements at element index 10 (byte offset 351) using index "i" (which evaluates to 10).
 - client/Wayland/wlf_input.c:308: overrun-local: Overrunning array "contacts" of 10 32-byte elements at element index 10 (byte offset 351) using index "i" (which evaluates to 10).
 - client/Wayland/wlf_input.c:360: overrun-local: Overrunning array "contacts" of 10 32-byte elements at element index 10 (byte offset 351) using index "i" (which evaluates to 10).
 - client/Wayland/wlf_input.c:251: error[arrayIndexOutOfBounds]: Array 'contacts[10]' accessed at index 10, which is out of bounds.
 - client/Wayland/wlf_input.c:308: error[arrayIndexOutOfBounds]: Array 'contacts[10]' accessed at index 10, which is out of bounds.
 - client/Wayland/wlf_input.c:360: error[arrayIndexOutOfBounds]: Array 'contacts[10]' accessed at index 10, which is out of bounds.
 - client/Wayland/wlf_input.c:246: uninit_use_in_call: Using uninitialized value "y" when calling "wlf_scale_coordinates".
 - client/Wayland/wlf_input.c:246: uninit_use_in_call: Using uninitialized value "x" when calling "wlf_scale_coordinates".

The maximal number of touches can be higher then 10, see:
https://wayland.freedesktop.org/libinput/doc/latest/touchpads.html

Let's increse the MAX_CONTACTS count and add checks to prevent usage of
uninitialized values.

(cherry picked from commit 6ab79961ef09bc0340633319c388b6b7517b1f3d)

gdi: Fix missing unlock

This fixes the following defect reported by covscan tool:
libfreerdp/gdi/gfx.c:144: missing_unlock: Returning without unlocking "update->mux".

(cherry picked from commit 914808f62cd2ac4a6984ee638112e8dc3aad9e52)

[generate_argument_docbook] Fix typo in XML entity.

The character '>' was being rendered as < instead of >.

(cherry picked from commit 98930bf2759905f2290e5d777f57a79e7589f220)

Fix memory leaks in client/encomsp_main.c and client/remdesk_main.c

(cherry picked from commit 28e29f8ad568b195a9d6a1d785eaa81da13f93ff)

Fixed #6245: Added additional tests to assistance parser

(cherry picked from commit 69141aa830b6e73e859f907b9bd2a4cac2777d8f)

report only actual bytes received, not allocated buffer size (interrupt produces data, timeout doesn't)

(cherry picked from commit 2e4f27ac9f7bcecb3c3f453341818e538386207f)

Lock remaining occurances of security_encrypt/security_decrypt variables

(cherry picked from commit f01ae7d2573b677eba6c8a50fe12246a23b15f2e)

Lock security_decrypt to avoid simultaneous counter manipulation

(cherry picked from commit 164c00f68b64781d8c624a8c71fab6691519d294)

only call 'libusb_set_interface_alt_setting' when value is changed

(cherry picked from commit ea8c922355c48b6a18900aa543e716b6ae1cd08e)

winpr/library: Use RTLD_GLOBAL for dlopen

LoadLibraryA implementation uses the RTLD_LOCAL flag for dlopen currently.
This flag doesn't allow the symbols to be used by the subsequently loaded
libraries. This is a problem for the video channel when -DBUILTIN_CHANNELS=OFF
is used as it uses functions from the geometry channel. Let's use RTLD_GLOBAL
instead to prevent "undefined symbol" errors in such cases.

Fixes: https://github.com/FreeRDP/FreeRDP/issues/6236
(cherry picked from commit d8cd671cc68d503757e32eb80f7a4dee44e47754)

Added scancodes for launch keys

(cherry picked from commit c97c1ca359db825ee6d172b5860b793dcf3a1e83)

Added release zip creation to script.

(cherry picked from commit 25f62eedddc8fb249e0936f86f9984ee9724c6a1)

Fixed #6221: Update floatbar position with multitouch input

(cherry picked from commit 004910ce5d76e114f4f8cfec6429004b26bc4443)

Fixed memory leak in rdpei

(cherry picked from commit 8c2c19bbc81eaf69169bd581dbac8c9a906fb5ee)

new: add release script

Add a updated version of script for creating the release tarball.
If TAG is set the TAG is used otherwise it is tried to detect the last
TAG using git describe.

(cherry picked from commit 93d6de297800568b571e373d6989c54345f1e1da)

Read newline from stdio on certificate accept

(cherry picked from commit 5b842bc7a78621218b1179923c002d32c41f15fe)

Merge pull request #6212 from akallabeth/stable_backport_cve

Stable backport cve

Prepared version for 2.1.1

Updated changelog for 2.1.1

Clear dynamic channel lists on disconnect.

(cherry picked from commit a1eb3e66b31579d3d878dee67913962140f75255)

codec: fix typo in progressive codec log

(cherry picked from commit 8d72051ab157d89af3f919a441170ca57bf67e84)

Fixed some more resource cleanup leaks in nla

(cherry picked from commit 354bb7d6ae98df282775d154b609a39c1068a09b)

Reformatted to satisfy clang-format

(cherry picked from commit a4e95f8e65dfbfd2625034ad6740645366a6c0c0)

Abort on first possible certificate validation error

Only retry certificate validation if the purpose was wrong.

(cherry picked from commit de619e9964684eced5fb3108de81440b979aace0)

Fixed #6197: NULL check in urbdrc

(cherry picked from commit fb3a0e6b5ae3b4e6523509a0ec0c522425968989)

Fixed #6195: Wrong length read/write in rdpei

(cherry picked from commit a18a732d4b87c85bcd364626b9ab2b8f95f9e955)

Fixed #6200: Arraysize check

(cherry picked from commit 06c48df0dfd228646fed00c554a20ae9bcaa5e5e)

Fixed #6199: Reading version information in tsg

(cherry picked from commit e501c56e5ca0c76c4019e7048cba3ee63331d830)

Fixed #6201: event handler count check

(cherry picked from commit 018eaa44f52b3e9e33bfa80493faf9be57713a3d)

Reset pointer to NULL after free.

(cherry picked from commit 33c7f808154c6682d3b84526a46d79f3e8d5c1ac)

Renamed variable to avoid MSVC define collission

(cherry picked from commit f9e1f21b0ce47d8eeea40314ce6b8b666964dc7d)

Fixed missing label

Ensure buffers are NULL before reuse in NLA

(cherry picked from commit 5f53b2b7c7109016b7127d595e13bd333ac77613)

Removed unused variable warnings

(cherry picked from commit 8052708f3354a686de98b62d641e9d0eb61a74db)

Fixed invalid argument to strtok_s

(cherry picked from commit dc4ac3ba17b6a340b96aa3f6363c6fac866696b7)

Fixed GHSL-2020-101 missing NULL check

(cherry picked from commit b207dbba35c505bbc3ad5aadc10b34980c6b7e8e)

Fixed  GHSL-2020-102 heap overflow

(cherry picked from commit 197b16cc15a12813c2e4fa2d6ae9cd9c4a57e581)

Fixed multiple sanitizer errors in codecs

(cherry picked from commit 2278d92a5d902692a7d1088629b2345c9b4e229c)

Fixed issues with clang sanitizers and alignemt offsets.

(cherry picked from commit 4c1011fec37459ecc11f6c4453bcd693ed614e5d)

Fixed history buffer reset.

(cherry picked from commit ccc9cbef2d5d0d9f5cf5ec7621f71bed33f41aba)

Fixed extended info packet alignment.

(cherry picked from commit 03ebaf2dc1547c75f8693dd5087ce2e8dc17765a)

Fixed rdp_read_info_packet unaligned access and size checks

(cherry picked from commit c75d08d70e878d35cd12ffac2aefcda405576092)

Fixed memory leak in test

(cherry picked from commit 2d630cccf7b1e566f99b74a224805fc25f85d6c1)

Fixed unaligned access

(cherry picked from commit cb2ed7f09ad68242bfdfad8967024b063f785d97)

Fixed rails debug string warnings.

(cherry picked from commit e58ea30305e8754ada82018c4f2042ec1b72337c)

utf8 behaviour fixes

(cherry picked from commit bb78eb4fa6f8618a70995eaf17aba94cc47a1e74)

Rewritten rdp_recv_logon_info_v2 to remove unaligned access

(cherry picked from commit 66d182a84bed7bf19b6a99d71a4e4c7c6856f583)

Rewritten check to satisfy BehaviouralSanitizer

(cherry picked from commit 14829de866b43e7f2740b46f0c736b9adf5067eb)

Fixed BehaviourSanitizer warning in rdp parser

(cherry picked from commit 771332c04e2dbad964d0cb11a86ff561e792bc35)

Fixed memory leak in NTLM test

(cherry picked from commit 135458cf27160d50e6294f87ef80f27f1f65d319)

Fixed undefined behaviour

(cherry picked from commit c15929d821ce99aa8c1069f790f4addbe9439593)

Fixed undefined behaviour in primitives shift

(cherry picked from commit 436bd3dbb103c7c49e51ffb1cafad6f25ab05d66)

Fixed undefined behaviour in ncrush

(cherry picked from commit 83137d2a1bb732fbea2f20778924a50a79f63fef)

Fixed undefined behaviour in rfx decoder

(cherry picked from commit ef611d34d61c6590429c17db5c97f0a9a33147e8)

Fixed UndefinedBehaviour in planar left shift

(cherry picked from commit 328691c46597c194f01a77a9d33d58b2faa88c9d)

Fixed BehaviourSanitizer  warnings in streams.

(cherry picked from commit 66ea3d0579841b468684e05936fabf654727e720)