tigervnc

Verlauf

Pierre Ossman 9b9c66d43e Be defensive about overflows in stream objects We use a lot of lengths given to us over the network, so be more paranoid about them causing an overflow as otherwise an attacker might trick us in to overwriting other memory. This primarily affects the client which often gets lengths from the server, but there are also some scenarios where the server might theoretically be vulnerable. Issue found by Pavel Cheremushkin from Kaspersky Lab. (cherry picked from commit `75e6e0653a`)		vor 4 Jahren
..
CMakeLists.txt	Add stream class to feed data from a file	vor 9 Jahren
Exception.cxx	Use printf constructor safely	vor 10 Jahren
Exception.h	Make exception classes have clearer messages	vor 6 Jahren
FdInStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
FdInStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
FdOutStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
FdOutStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
FileInStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
FileInStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
HexInStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
HexInStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
HexOutStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
HexOutStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
InStream.cxx	Migrating to new directory structure adopted from the RealVNC's source tree. More changes will follow.	vor 18 Jahren
InStream.h	Be defensive about overflows in stream objects	vor 4 Jahren
MemInStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
MemOutStream.h	Be defensive about overflows in stream objects	vor 4 Jahren
OutStream.h	Be defensive about overflows in stream objects	vor 4 Jahren
RandomStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
RandomStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
TLSException.cxx	Fix bad reference in TLSException initialiser	vor 6 Jahren
TLSException.h	[Development] Implement secure TLS streams.	vor 14 Jahren
TLSInStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
TLSInStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
TLSOutStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
TLSOutStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
ZlibInStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
ZlibInStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
ZlibOutStream.cxx	Be defensive about overflows in stream objects	vor 4 Jahren
ZlibOutStream.h	Use size_t for lengths in stream objects	vor 4 Jahren
types.h	Make rawBytesEquivalent an unsigned 64-bit integer. Otherwise, it will overflow in less than a minute if using a full-screen video or 3D application.	vor 13 Jahren