Werner Koch e33e74e3a4 Fix potential heap corruption in "gpg -v --version" ...

* g10/gpg.c (build_list): Rewrite to cope with buffer overflow in
certain locales.
* util/membuf.c (put_membuf_str): New.
(get_membuf): Make LEN optional.
--

This fixes an obvious bug in locales where the translated string is
longer than the original.  The bug could be exhibited by using
LANG=ru_RU.utf8 gpg -v --version.

En passant we also removed the trailing white space on continued
lines.

Reported-by: Dmitry V. Levin" <ldv at altlinux.org>

2012-12-15 11:28:00 +01:00

..

argparse.c

Update copyright years.

2012-01-10 11:51:19 +01:00

assuan-buffer.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-client.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-connect.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-defs.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-errors.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-logging.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-socket-connect.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-socket.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan-util.c

Comment typ fixes.

2007-12-03 14:41:38 +00:00

cert.c

The rest of the VMS changes.

2010-09-28 15:55:24 +00:00

ChangeLog-2011

Rename all ChangeLog files to ChangeLog-2011.

2011-12-02 19:42:56 +01:00

compat.c

Restructured the compat functions and changed its license.

2009-08-25 20:00:24 +00:00

convert.c

First set of changes to backport the new card code from 2.0.

2009-07-21 14:30:13 +00:00

dotlock.c

Replace file locking by the new portable dotlock code.

2012-01-10 15:16:44 +01:00

errors.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

estream-printf.c

Use gcc pragmas to suppress some warnings.

2012-01-10 11:31:00 +01:00

fileutil.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

http.c

Avoid caches to get the most recent copy of the key. This is bug

2009-05-26 14:15:56 +00:00

iobuf.c

Minor changes to help the VMS port

2010-09-28 10:07:30 +00:00

isascii.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

logger.c

The rest of the VMS changes.

2010-09-28 15:55:24 +00:00

Makefile.am

First set of changes to backport the new card code from 2.0.

2009-07-21 14:30:13 +00:00

membuf.c

Fix potential heap corruption in "gpg -v --version"

2012-12-15 11:28:00 +01:00

memory.c

First set of changes to backport the new card code from 2.0.

2009-07-21 14:30:13 +00:00

memrchr.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

miscutil.c

Allow building with the 32 bit mingw-w64 toolchain.

2012-01-12 18:10:30 +01:00

mkdtemp.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

pka.c

Removed some set but unused vars.

2011-08-09 10:54:22 +02:00

regcomp.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

regex_internal.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

regex_internal.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

regex.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

regexec.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

riscos.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

secmem.c

Fix typos spotted during translations

2012-08-24 16:37:44 +02:00

simple-gettext.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

srv.c

The rest of the VMS changes.

2010-09-28 15:55:24 +00:00

strgutil.c

Fix a W32 problem

2009-09-03 15:27:30 +00:00

strsep.c

* strsep.c (strsep): It's strsep, not strsep2 from testing. (If I had

2006-10-03 00:36:18 +00:00

timegm.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

ttyio.c

On VMS use --batch by default if in batch mode.

2011-09-12 15:28:28 +02:00

w32reg.c

Switched to GPLv3.

2007-10-23 10:48:09 +00:00