extern/KasmVNC
1
0
Fork 0
mirror of https://github.com/kasmtech/KasmVNC.git synced 2025-02-05 04:59:28 +01:00
Code Issues Packages Projects Releases Wiki Activity
ed73ac2aa7
KasmVNC/common/rdr
History
Pierre Ossman ae6cbd19e9 Be defensive about overflows in stream objects 
We use a lot of lengths given to us over the network, so be more
paranoid about them causing an overflow as otherwise an attacker
might trick us in to overwriting other memory.

This primarily affects the client which often gets lengths from the
server, but there are also some scenarios where the server might
theoretically be vulnerable.

Issue found by Pavel Cheremushkin from Kaspersky Lab.
2020-09-21 12:56:23 +03:00
..
CMakeLists.txt Initial commit 2020-09-20 12:16:44 +00:00
Exception.cxx Initial commit 2020-09-20 12:16:44 +00:00
Exception.h Initial commit 2020-09-20 12:16:44 +00:00
FdInStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
FdInStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
FdOutStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
FdOutStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
FileInStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
FileInStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
HexInStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
HexInStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
HexOutStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
HexOutStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
InStream.cxx Initial commit 2020-09-20 12:16:44 +00:00
InStream.h Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
MemInStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
MemOutStream.h Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
OutStream.h Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
RandomStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
RandomStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
SubstitutingInStream.h Initial commit 2020-09-20 12:16:44 +00:00
TLSException.cxx Initial commit 2020-09-20 12:16:44 +00:00
TLSException.h Initial commit 2020-09-20 12:16:44 +00:00
TLSInStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
TLSInStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
TLSOutStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
TLSOutStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
types.h Initial commit 2020-09-20 12:16:44 +00:00
ZlibInStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
ZlibInStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00
ZlibOutStream.cxx Be defensive about overflows in stream objects 2020-09-21 12:56:23 +03:00
ZlibOutStream.h Use size_t for lengths in stream objects 2020-09-21 12:55:59 +03:00