• Simon Giesecke's avatar
    Problem: Possible buffer overruns related to metadata in various mechanisms (#2683) · 4a18f620
    Simon Giesecke authored
    * Problem: no test case with CURVE encryption and large identity
    
    Solution: added test case (currently crashing)
    
    * Problem: possible buffer overflow in mechanism_t::add_property
    
    Solution: add target buffer length parameter and check the buffer is sufficiently large
    
    * Problem: test cases accidentally excluded from build
    
    Solution: remove #if/#endif
    
    * Problem: possible buffer overruns related to metadata at various locations
    
    Solution: allocate buffer large enough for actual metadata, reduce code duplication
    
    * Problem: syntax error related to pointer type conversion
    
    Solution: change argument type of make_command_with_basic_properties to const char *
    
    * Problem: large metadata may cause an assertion in produce_initiate
    
    Solution: Allow metadata of arbitrary size in produce_initiate
    4a18f620
Name
Last commit
Last update
.github Loading commit data...
RELICENSE Loading commit data...
builds Loading commit data...
doc Loading commit data...
include Loading commit data...
m4 Loading commit data...
packaging Loading commit data...
perf Loading commit data...
src Loading commit data...
tests Loading commit data...
tools Loading commit data...
.gitignore Loading commit data...
.hgeol Loading commit data...
.mailmap Loading commit data...
.travis.yml Loading commit data...
AUTHORS Loading commit data...
CMakeLists.txt Loading commit data...
COPYING Loading commit data...
COPYING.LESSER Loading commit data...
Dockerfile Loading commit data...
Doxygen.cfg Loading commit data...
FindSodium.cmake Loading commit data...
INSTALL Loading commit data...
Makefile.am Loading commit data...
NEWS Loading commit data...
README.cygwin.md Loading commit data...
README.doxygen.md Loading commit data...
README.md Loading commit data...
ZeroMQConfig.cmake.in Loading commit data...
acinclude.m4 Loading commit data...
appveyor.yml Loading commit data...
autogen.sh Loading commit data...
branding.bmp Loading commit data...
ci_build.sh Loading commit data...
ci_deploy.sh Loading commit data...
configure.ac Loading commit data...
installer.ico Loading commit data...
version.sh Loading commit data...