Yu Watanabe a5b0338e89 sd-bus: fix buffer overflow ...

Fixes #23486.

(cherry picked from commit 89b6a3f13e5f3b8a375dc82cb2a1c2c204a5067e)
(cherry picked from commit a5c4e29b2ca83b0956ea4635e1db7b02ae007d55)

2022-06-02 20:09:14 +02:00

..

crash-4f0211eb269e28db941961061494bfdbf3345e54

fuzz-bus-message: add two test cases that pass now

2018-10-02 11:53:20 +02:00

crash-26bba7182dedc8848939931d9fcefcb7922f2e56

bus-message: avoid an infinite loop on empty structures

2018-10-02 11:53:20 +02:00

crash-29ed3c202e0ffade3cad42c8bbeb6cc68a21eb8e

bus-message: do not crash on message with a string of zero length

2018-10-02 11:53:20 +02:00

crash-32bf69483cbd4f2e6d46c25a2f92a472109aee45

fuzz-bus-message: add two test cases that pass now

2018-10-02 11:53:20 +02:00

crash-603dfd98252375ac7dbced53c2ec312671939a36

bus-message: avoid wrap-around when using length read from message

2018-10-02 11:59:08 +02:00

crash-4162a61a79e4c5a832ca5232212f75fa560a1f75

bus-message: return -EBADMSG not -EINVAL on invalid !gvariant messages

2018-10-02 11:53:20 +02:00

crash-37449529b1ad867f0c2671fa80aca5d7812a2b70

bus-message: fix skipping of array fields in !gvariant messages

2018-10-02 11:53:20 +02:00

crash-b88ad9ecf4aacf4a0caca5b5543953265367f084

Introduce free_and_strndup and use it in bus-message.c

2018-10-02 11:42:45 +02:00

crash-c1b37b4729b42c0c05b23cba4eed5d8102498a1e

bus-message: let's always use -EBADMSG when the message is bad

2018-10-02 11:53:20 +02:00

crash-d8f3941c74219b4c03532c9b244d5ea539c61af5

bus-message: fix calculation of offsets table for arrays

2018-10-02 11:53:20 +02:00

crash-e1b811da5ca494e494b77c6bd8e1c2f2989425c5

bus-message: fix calculation of offsets table

2018-10-02 11:53:20 +02:00

issue-23486-case-1

sd-bus: fix buffer overflow

2022-06-02 20:09:14 +02:00

issue-23486-case-2

sd-bus: fix buffer overflow

2022-06-02 20:09:14 +02:00

issue-23486-case-3

sd-bus: fix buffer overflow

2022-06-02 20:09:14 +02:00

leak-c09c0e2256d43bc5e2d02748c8d8760e7bc25d20

sd-bus: unify three code-paths which free struct bus_container

2018-10-02 11:53:20 +02:00

message1

fuzz-bus-message: add fuzzer for message parsing

2018-10-02 11:09:05 +02:00

oss-fuzz-14016

bus-message: validate signature in gvariant messages

2019-04-11 14:01:38 +02:00

oss-fuzz-19446

bus-message: fix negative offset with ~empty message

2020-05-20 09:33:54 +02:00

timeout-08ee8f6446a4064db064e8e0b3d220147f7d0b5b

bus-message: avoid an infinite loop on empty structures

2018-10-02 11:53:20 +02:00

zero-offset-to-null-pointer

bus-message: avoid dereferencing a NULL pointer

2020-06-22 17:09:49 +02:00