1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-06-01 22:28:02 +02:00
gnupg/util
Werner Koch e33e74e3a4 Fix potential heap corruption in "gpg -v --version"
* g10/gpg.c (build_list): Rewrite to cope with buffer overflow in
certain locales.
* util/membuf.c (put_membuf_str): New.
(get_membuf): Make LEN optional.
--

This fixes an obvious bug in locales where the translated string is
longer than the original.  The bug could be exhibited by using
LANG=ru_RU.utf8 gpg -v --version.

En passant we also removed the trailing white space on continued
lines.

Reported-by: Dmitry V. Levin" <ldv at altlinux.org>
2012-12-15 11:28:00 +01:00
..
argparse.c Update copyright years. 2012-01-10 11:51:19 +01:00
assuan-buffer.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-client.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-connect.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-defs.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-errors.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-logging.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-socket-connect.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-socket.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan-util.c Comment typ fixes. 2007-12-03 14:41:38 +00:00
cert.c The rest of the VMS changes. 2010-09-28 15:55:24 +00:00
ChangeLog-2011 Rename all ChangeLog files to ChangeLog-2011. 2011-12-02 19:42:56 +01:00
compat.c Restructured the compat functions and changed its license. 2009-08-25 20:00:24 +00:00
convert.c First set of changes to backport the new card code from 2.0. 2009-07-21 14:30:13 +00:00
dotlock.c Replace file locking by the new portable dotlock code. 2012-01-10 15:16:44 +01:00
errors.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
estream-printf.c Use gcc pragmas to suppress some warnings. 2012-01-10 11:31:00 +01:00
fileutil.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
http.c Avoid caches to get the most recent copy of the key. This is bug 2009-05-26 14:15:56 +00:00
iobuf.c Minor changes to help the VMS port 2010-09-28 10:07:30 +00:00
isascii.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
logger.c The rest of the VMS changes. 2010-09-28 15:55:24 +00:00
Makefile.am First set of changes to backport the new card code from 2.0. 2009-07-21 14:30:13 +00:00
membuf.c Fix potential heap corruption in "gpg -v --version" 2012-12-15 11:28:00 +01:00
memory.c First set of changes to backport the new card code from 2.0. 2009-07-21 14:30:13 +00:00
memrchr.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
miscutil.c Allow building with the 32 bit mingw-w64 toolchain. 2012-01-12 18:10:30 +01:00
mkdtemp.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
pka.c Removed some set but unused vars. 2011-08-09 10:54:22 +02:00
regcomp.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
regex_internal.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
regex_internal.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
regex.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
regexec.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
riscos.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
secmem.c Fix typos spotted during translations 2012-08-24 16:37:44 +02:00
simple-gettext.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
srv.c The rest of the VMS changes. 2010-09-28 15:55:24 +00:00
strgutil.c Fix a W32 problem 2009-09-03 15:27:30 +00:00
strsep.c * strsep.c (strsep): It's strsep, not strsep2 from testing. (If I had 2006-10-03 00:36:18 +00:00
timegm.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00
ttyio.c On VMS use --batch by default if in batch mode. 2011-09-12 15:28:28 +02:00
w32reg.c Switched to GPLv3. 2007-10-23 10:48:09 +00:00