KasmVNC

Commit Graph

Author	SHA1	Message	Date
Pierre Ossman	6a3f711878	Add write protection to OffsetPixelBuffer No one should every try to write to this buffer. Enforce that by throwing an exception if any one tries to get a writeable pointer to the data.	5 years ago
Pierre Ossman	3282836baf	Make ZlibInStream more robust against failures Move the checks around to avoid missing cases where we might access memory that is no longer valid. Also avoid touching the underlying stream implicitly (e.g. via the destructor) as it might also no longer be valid. A malicious server could theoretically use this for remote code execution in the client. Issue found by Pavel Cheremushkin from Kaspersky Lab	5 years ago
matt	408c005d3e	Initial commit	5 years ago

Author

SHA1

Message

Date

Pierre Ossman

6a3f711878

Add write protection to OffsetPixelBuffer

No one should every try to write to this buffer. Enforce that by
throwing an exception if any one tries to get a writeable pointer
to the data.

Pierre Ossman

3282836baf

Make ZlibInStream more robust against failures

Move the checks around to avoid missing cases where we might access
memory that is no longer valid. Also avoid touching the underlying
stream implicitly (e.g. via the destructor) as it might also no
longer be valid.

A malicious server could theoretically use this for remote code
execution in the client.

Issue found by Pavel Cheremushkin from Kaspersky Lab

matt

408c005d3e

Initial commit

1 2

53 Commits (33dd45b6e5e1a4125b1a3499f361f813dfd1d558)