1. 25 Oct, 2016 4 commits
  2. 24 Oct, 2016 6 commits
  3. 21 Oct, 2016 4 commits
  4. 20 Oct, 2016 2 commits
  5. 18 Oct, 2016 6 commits
  6. 14 Oct, 2016 7 commits
  7. 13 Oct, 2016 6 commits
  8. 12 Oct, 2016 3 commits
  9. 11 Oct, 2016 1 commit
    • log: sanity check the returned value from snprintf() · f6c79610
      Lans Zhang authored
      The returned value from snprintf() should be checked carefully.
      
      This bug can be leveraged to execute arbitrary code through carefully
      constructing the payload, e.g,
      
      lxc-freeze -n `python -c "print 'AAAAAAAA' + 'B'*959"` -P PADPAD -o /tmp/log
      
      This command running on Ubuntu 14.04 (x86-64) can cause a segment fault.
      Signed-off-by: 's avatarLans Zhang <jia.zhang@windriver.com>
  10. 08 Oct, 2016 1 commit