You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3282836baf
Move the checks around to avoid missing cases where we might access memory that is no longer valid. Also avoid touching the underlying stream implicitly (e.g. via the destructor) as it might also no longer be valid. A malicious server could theoretically use this for remote code execution in the client. Issue found by Pavel Cheremushkin from Kaspersky Lab |
5 years ago | |
|---|---|---|
| .. | ||
| CMakeLists.txt | 5 years ago | |
| Exception.cxx | 5 years ago | |
| Exception.h | 5 years ago | |
| FdInStream.cxx | 5 years ago | |
| FdInStream.h | 5 years ago | |
| FdOutStream.cxx | 5 years ago | |
| FdOutStream.h | 5 years ago | |
| FileInStream.cxx | 5 years ago | |
| FileInStream.h | 5 years ago | |
| FixedMemOutStream.h | 5 years ago | |
| HexInStream.cxx | 5 years ago | |
| HexInStream.h | 5 years ago | |
| HexOutStream.cxx | 5 years ago | |
| HexOutStream.h | 5 years ago | |
| InStream.cxx | 5 years ago | |
| InStream.h | 5 years ago | |
| MemInStream.h | 5 years ago | |
| MemOutStream.h | 5 years ago | |
| OutStream.h | 5 years ago | |
| RandomStream.cxx | 5 years ago | |
| RandomStream.h | 5 years ago | |
| SubstitutingInStream.h | 5 years ago | |
| TLSException.cxx | 5 years ago | |
| TLSException.h | 5 years ago | |
| TLSInStream.cxx | 5 years ago | |
| TLSInStream.h | 5 years ago | |
| TLSOutStream.cxx | 5 years ago | |
| TLSOutStream.h | 5 years ago | |
| ZlibInStream.cxx | 5 years ago | |
| ZlibInStream.h | 5 years ago | |
| ZlibOutStream.cxx | 5 years ago | |
| ZlibOutStream.h | 5 years ago | |
| types.h | 5 years ago | |