apk-tools/libfetch
Timo Teräs ca1d975e5e libfetch: fix range checking for http/ftp protocol parsing
Various parsing of numeric strings were not having adequate range
checking causing information leak or potential crash.

CVE-2021-36159
fixes #10749

Co-authored-by: Ariadne Conill <ariadne@dereferenced.org>
Reported-by: Samanta Navarro <ferivoz@riseup.net>
2021-07-26 14:43:14 +03:00
..
Makefile add script to autogenerate help from man pages 2020-05-06 13:05:19 +03:00
common.c libfetch: fix range checking for http/ftp protocol parsing 2021-07-26 14:43:14 +03:00
common.h libfetch: fix range checking for http/ftp protocol parsing 2021-07-26 14:43:14 +03:00
errlist.sh import libfetch-2.38 from NetBSD 2017-10-05 16:58:09 +03:00
fetch.3 import libfetch-2.38 from NetBSD 2017-10-05 16:58:09 +03:00
fetch.c libfetch: fix range checking for http/ftp protocol parsing 2021-07-26 14:43:14 +03:00
fetch.cat3 import libfetch-2.38 from NetBSD 2017-10-05 16:58:09 +03:00
fetch.h libfetch: Increase URL password length 2021-01-08 10:55:37 +02:00
file.c libfetch: remove unwanted code conditionals 2017-10-05 16:59:14 +03:00
ftp.c libfetch: fix range checking for http/ftp protocol parsing 2021-07-26 14:43:14 +03:00
ftp.errors import libfetch-2.38 from NetBSD 2017-10-05 16:58:09 +03:00
http.c libfetch: fix range checking for http/ftp protocol parsing 2021-07-26 14:43:14 +03:00
http.errors import libfetch-2.38 from NetBSD 2017-10-05 16:58:09 +03:00
meson.build build: make sure to use helper scripts from git tree and not system 2020-10-09 16:09:19 +03:00
openssl-compat.c libfetch: improve openssl/libressl compatibility 2017-10-06 13:25:27 +03:00
openssl-compat.h libfetch: improve openssl/libressl compatibility 2017-10-06 13:25:27 +03:00