tigervnc

履歴

Pierre Ossman 9b9c66d43e Be defensive about overflows in stream objects We use a lot of lengths given to us over the network, so be more paranoid about them causing an overflow as otherwise an attacker might trick us in to overwriting other memory. This primarily affects the client which often gets lengths from the server, but there are also some scenarios where the server might theoretically be vulnerable. Issue found by Pavel Cheremushkin from Kaspersky Lab. (cherry picked from commit `75e6e0653a`)		4年前
..
CMakeLists.txt	Add stream class to feed data from a file	9年前
Exception.cxx	Use printf constructor safely	10年前
Exception.h	Make exception classes have clearer messages	6年前
FdInStream.cxx	Be defensive about overflows in stream objects	4年前
FdInStream.h	Use size_t for lengths in stream objects	4年前
FdOutStream.cxx	Be defensive about overflows in stream objects	4年前
FdOutStream.h	Use size_t for lengths in stream objects	4年前
FileInStream.cxx	Be defensive about overflows in stream objects	4年前
FileInStream.h	Use size_t for lengths in stream objects	4年前
HexInStream.cxx	Be defensive about overflows in stream objects	4年前
HexInStream.h	Use size_t for lengths in stream objects	4年前
HexOutStream.cxx	Be defensive about overflows in stream objects	4年前
HexOutStream.h	Use size_t for lengths in stream objects	4年前
InStream.cxx	Migrating to new directory structure adopted from the RealVNC's source tree. More changes will follow.	18年前
InStream.h	Be defensive about overflows in stream objects	4年前
MemInStream.h	Use size_t for lengths in stream objects	4年前
MemOutStream.h	Be defensive about overflows in stream objects	4年前
OutStream.h	Be defensive about overflows in stream objects	4年前
RandomStream.cxx	Be defensive about overflows in stream objects	4年前
RandomStream.h	Use size_t for lengths in stream objects	4年前
TLSException.cxx	Fix bad reference in TLSException initialiser	6年前
TLSException.h	[Development] Implement secure TLS streams.	14年前
TLSInStream.cxx	Be defensive about overflows in stream objects	4年前
TLSInStream.h	Use size_t for lengths in stream objects	4年前
TLSOutStream.cxx	Be defensive about overflows in stream objects	4年前
TLSOutStream.h	Use size_t for lengths in stream objects	4年前
ZlibInStream.cxx	Be defensive about overflows in stream objects	4年前
ZlibInStream.h	Use size_t for lengths in stream objects	4年前
ZlibOutStream.cxx	Be defensive about overflows in stream objects	4年前
ZlibOutStream.h	Use size_t for lengths in stream objects	4年前
types.h	Make rawBytesEquivalent an unsigned 64-bit integer. Otherwise, it will overflow in less than a minute if using a full-screen video or 3D application.	12年前