xfnw/plan9fox
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
plan9fox/sys/src/libventi
History
cinap_lenrek 797cc13c70 fix dangerous werrstr() usages 
werrstr() takes a format string as its first argument.
a common error is to pass user controlled string buffers
into werrstr() that might contain format string escapes
causing werrstr() to take bogus arguments from the stack
and crash.

so instead of doing:
	werrstr(buf);

we want todo:
	werrstr("%s", buf);

or if we have a local ERRMAX sized buffer that we can override:
	errstr(buf, sizeof buf);
2014-11-07 12:51:59 +01:00
..
cache.acid Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
cache.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
client.c fix dangerous werrstr() usages 2014-11-07 12:51:59 +01:00
conn.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
cvt.h Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
debug.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
debugpacket.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
dial.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
dtype.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
entry.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
fcall.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
fcallfmt.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
file.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
hangup.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
log.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
mem.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
mkfile Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
packet.acid Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
packet.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
parsescore.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
queue.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
queue.h Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
root.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
rpc.acid Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
rpc.c libventi: handle nil connection in rpc as error instead of crashing (from sources) 2013-01-25 14:19:18 +01:00
scorefmt.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
send.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
server.c venti: fix possible nil deref in libventi vtgetreq() and cleanup vacfs (import from sources) 2012-08-07 16:11:35 +02:00
srvhello.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
strdup.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
string.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
time.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
version.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
zero.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00
zeroscore.c Import sources from 2011-03-30 iso image - lib 2011-03-30 19:35:09 +03:00