4 Commits

Author	SHA1	Message	Date
Pierre Ossman	f38e474993	Fix error check for zlib calls ... There are multiple "okay" return values, not just Z_OK. Make sure we don't bail out needlessly.	2020-09-21 13:18:11 +03:00
Pierre Ossman	ae6cbd19e9	Be defensive about overflows in stream objects ... We use a lot of lengths given to us over the network, so be more paranoid about them causing an overflow as otherwise an attacker might trick us in to overwriting other memory. This primarily affects the client which often gets lengths from the server, but there are also some scenarios where the server might theoretically be vulnerable. Issue found by Pavel Cheremushkin from Kaspersky Lab.	2020-09-21 12:56:23 +03:00
Pierre Ossman	259f1055cb	Use size_t for lengths in stream objects ... Provides safety against them accidentally becoming negative because of bugs in the calculations. Also does the same to CharArray and friends as they were strongly connection to the stream objects.	2020-09-21 12:55:59 +03:00
matt	408c005d3e	Initial commit	2020-09-20 12:16:44 +00:00