Most of this series has been sitting in bug#28823 for a while. It adds some missing checks for client-provided data in the glx code, and fixes a bug in the swapped-client path (patch 4/5). Cheers, Julien