You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ae6cbd19e9
We use a lot of lengths given to us over the network, so be more paranoid about them causing an overflow as otherwise an attacker might trick us in to overwriting other memory. This primarily affects the client which often gets lengths from the server, but there are also some scenarios where the server might theoretically be vulnerable. Issue found by Pavel Cheremushkin from Kaspersky Lab. |
5 years ago | |
|---|---|---|
| .. | ||
| CMakeLists.txt | 5 years ago | |
| Exception.cxx | 5 years ago | |
| Exception.h | 5 years ago | |
| FdInStream.cxx | 5 years ago | |
| FdInStream.h | 5 years ago | |
| FdOutStream.cxx | 5 years ago | |
| FdOutStream.h | 5 years ago | |
| FileInStream.cxx | 5 years ago | |
| FileInStream.h | 5 years ago | |
| HexInStream.cxx | 5 years ago | |
| HexInStream.h | 5 years ago | |
| HexOutStream.cxx | 5 years ago | |
| HexOutStream.h | 5 years ago | |
| InStream.cxx | 5 years ago | |
| InStream.h | 5 years ago | |
| MemInStream.h | 5 years ago | |
| MemOutStream.h | 5 years ago | |
| OutStream.h | 5 years ago | |
| RandomStream.cxx | 5 years ago | |
| RandomStream.h | 5 years ago | |
| SubstitutingInStream.h | 5 years ago | |
| TLSException.cxx | 5 years ago | |
| TLSException.h | 5 years ago | |
| TLSInStream.cxx | 5 years ago | |
| TLSInStream.h | 5 years ago | |
| TLSOutStream.cxx | 5 years ago | |
| TLSOutStream.h | 5 years ago | |
| ZlibInStream.cxx | 5 years ago | |
| ZlibInStream.h | 5 years ago | |
| ZlibOutStream.cxx | 5 years ago | |
| ZlibOutStream.h | 5 years ago | |
| types.h | 5 years ago | |