pull over from xorg-server, porting as necessary.

--
apply fixes for:

X.Org Security Advisory:  Dec. 9, 2014
Protocol handling issues in X Window System servers

backported to 1.10.x by myself.

included are fixes for:

denial of service due to unchecked malloc in client authentication
        CVE-2014-8091
integer overflows calculating memory needs for requests
        CVE-2014-8092
        CVE-2014-8093
        CVE-2014-8094
out of bounds access due to not validating length or offset values in requests
        CVE-2014-8095
        CVE-2014-8096
        CVE-2014-8097
        CVE-2014-8098
        CVE-2014-8099
        CVE-2014-8100
        CVE-2014-8101
        CVE-2014-8102
        CVE-2014-8103
--
apply two more parts of CVE-2014-8092:
  Missing parens in REQUEST_FIXED_SIZE macro [CVE-2014-8092 pt. 5]
  dix: GetHosts bounds check using wrong pointer value [CVE-2014-8092 pt. 6]
--