KasmVNC

Commit Graph

Author	SHA1	Message	Date
Pierre Ossman	ae6cbd19e9	Be defensive about overflows in stream objects We use a lot of lengths given to us over the network, so be more paranoid about them causing an overflow as otherwise an attacker might trick us in to overwriting other memory. This primarily affects the client which often gets lengths from the server, but there are also some scenarios where the server might theoretically be vulnerable. Issue found by Pavel Cheremushkin from Kaspersky Lab.	5 years ago
Pierre Ossman	259f1055cb	Use size_t for lengths in stream objects Provides safety against them accidentally becoming negative because of bugs in the calculations. Also does the same to CharArray and friends as they were strongly connection to the stream objects.	5 years ago
matt	408c005d3e	Initial commit	5 years ago

Author

SHA1

Message

Date

Pierre Ossman

ae6cbd19e9

Be defensive about overflows in stream objects

We use a lot of lengths given to us over the network, so be more
paranoid about them causing an overflow as otherwise an attacker
might trick us in to overwriting other memory.

This primarily affects the client which often gets lengths from the
server, but there are also some scenarios where the server might
theoretically be vulnerable.

Issue found by Pavel Cheremushkin from Kaspersky Lab.

Pierre Ossman

259f1055cb

Use size_t for lengths in stream objects

Provides safety against them accidentally becoming negative because
of bugs in the calculations.

Also does the same to CharArray and friends as they were strongly
connection to the stream objects.

matt

408c005d3e

Initial commit

3 Commits (e7016550fcf0605564646d94ec48760c5b197c36)