Skip to content
Snippets Groups Projects
  1. Jul 03, 2019
  2. Jul 01, 2019
  3. Jun 24, 2019
  4. Jun 13, 2019
  5. Jun 11, 2019
  6. Jun 03, 2019
  7. May 29, 2019
    • Vladimír Čunát's avatar
      daemon TCP to upstream: don't send wrong message length · 10a113d7
      Vladimír Čunát authored
      See the added comments.  Such bugs are tricky, because the old code
      would typically work just fine, only if libuv/OS decided to postpone
      copying the data (perhaps large load), we would send two bytes from
      this address on C stack - their later value (hard to predict what).
      
      Security risks: the two bytes might theoretically contain information
      that was more or less private and we just send it to some DNS server
      (possibly over unencrypted TCP), but ATM I find it very unlikely that
      this bug could be practically exploited.
      Verified
      10a113d7
  8. May 28, 2019
  9. May 22, 2019
  10. Apr 29, 2019
  11. Apr 18, 2019