Robin Mills
13db7fdec2
Formatting changes
2017-11-19 08:29:06 +01:00
D4N
df504d2e82
Merge pull request #142 from D4N/reproducers_138_139_140
...
Added reproducers #138 , #139 and #140
2017-11-19 08:28:17 +01:00
Dan Čermák
c2d1614e7c
Updated bugfixes-test.out
2017-11-19 00:29:08 +01:00
Dan Čermák
2b3e3f878b
Added reproducers for #138 , #139 & #140
...
the issues correspond to CVE-2017-14858, CVE-2017-14861 and
CVE-2017-14866 respectively
2017-11-19 00:23:57 +01:00
D4N
13771c8757
Merge pull request #148 from Exiv2/documentation-changes
...
Documentation update for Michal.
2017-11-18 10:50:18 +01:00
clanmills
12e7d2a53f
Documentation update for Michal.
2017-11-18 09:39:29 +01:00
Luis Díaz Más
a79b75a67b
Merge pull request #154 from D4N/stringFormat_update
...
stringFormat update / ammendment to #137
2017-11-12 10:35:57 +01:00
Luis Díaz Más
87a83c89d5
Merge branch 'master' into stringFormat_update
2017-11-12 10:21:33 +01:00
Luis Díaz Más
0816755854
Merge pull request #164 from piponazo/fixMsvcWarning
...
Fix conversion issue detected by MSVC
2017-11-12 10:20:50 +01:00
Luis Díaz Más
1fe8d5ba7f
Fix conversion issue detected by MSVC
2017-11-12 09:54:17 +01:00
Luis Díaz Más
2ed661068c
Merge pull request #163 from piponazo/MsvcParallel
...
New MSVC flag to enable Object Level Parallelism in CMake code
2017-11-12 09:53:26 +01:00
Luis Díaz Más
d0c9b8920c
New MSVC flag to enable Object Level Parallelism in CMake code
2017-11-12 09:25:27 +01:00
D4N
baeb664e28
Merge pull request #160 from D4N/fix_159
...
Fixed potential out of bounds file access in printIDFStructure
2017-11-10 22:48:20 +01:00
Dan Čermák
7bae890ebf
Updated bugfixes-test.out
2017-11-10 15:18:47 +01:00
Dan Čermák
691fca4259
Added reproducer for 159 to the test suite
2017-11-10 15:18:31 +01:00
Dan Čermák
36df4bc997
Fixed potential out of bounds file access
...
This commit adds a out-of-bounds protection in the case that the
extracted values for offset & count are summed up larger than the size
of the file. Also this function checks for overflows before performing
the addition.
This fixes #159
2017-11-10 15:12:55 +01:00
Dan Čermák
cfa5073a2c
Added short explanation to internal function stringFormat
2017-11-09 20:38:11 +01:00
Dan Čermák
06cafadf4f
Added assertion that call to vsnprintf succeeds
2017-11-09 20:38:11 +01:00
Luis Díaz Más
f641f39ab9
Merge pull request #151 from piponazo/updateZlibDependency
...
Update zlib version in conanfile.py.
2017-11-07 18:35:34 +01:00
Luis Diaz Mas
c243727264
Update zlib version in conanfile.py.
...
- The previous version of the zlib recipe failed to compile in new
version of gcc (7.2)
2017-11-07 17:08:42 +01:00
Luis Díaz Más
e2940cc30b
Merge pull request #137 from tbeu/some-cleanup
...
Cleanup some issues
2017-11-05 17:02:22 +01:00
tbeu
c0ea5f4fba
Rewrite the reallocation the C++ way
...
* Fix handling of the return value of vsnprintf
* In C++11 we could use buffer.data instead of &buffer[0]
2017-11-04 21:01:36 +01:00
tbeu
22dbd632bb
Find single character
2017-11-04 21:01:36 +01:00
tbeu
d1f73aa237
Make it floats
2017-11-04 21:01:35 +01:00
tbeu
849f416771
Avoid self-assignment
2017-11-04 21:01:35 +01:00
tbeu
867343b46f
Utilize const Value reference
2017-11-04 21:01:34 +01:00
tbeu
fd64d53e4b
Remove superfluous variable declarations
2017-11-04 21:01:34 +01:00
tbeu
d7297a2c2c
Pass argument as constant reference
2017-11-04 21:01:33 +01:00
D4N
4864d390c4
Merge pull request #145 from D4N/reproducer_for_144
...
Added reproducer for #144 / CVE-2017-9953
2017-11-04 01:10:46 +01:00
Dan Čermák
a79774083e
Updated bugfixes-test.out
2017-11-04 00:20:38 +01:00
Dan Čermák
c640ea8608
Added reproducer for #144 / CVE-2017-9953 to the testsuite
2017-11-04 00:20:38 +01:00
Luis Díaz Más
a59900b53a
Merge pull request #136 from piponazo/cmakeDevOptions
...
Cmake dev options
2017-11-02 06:31:03 +01:00
Luis Diaz Mas
78ac8ebf9e
Add extra flags to detect more issues
2017-11-01 21:38:04 +01:00
Luis Diaz Mas
e52b3e77cf
Remove definition -DWIN32_LEAN_AND_MEAN that is already present in config.h
2017-11-01 05:37:54 +01:00
Luis Díaz Más
3e94c270cb
Do not treat CMAKE_C_FLAGS* variables. We do not have C code in the project
2017-11-01 05:37:54 +01:00
Luis Díaz Más
4ad4323685
Add new CMake options to use compiler flags to detect issues in the code (Gcc, Clang & MSVC)
2017-11-01 05:37:54 +01:00
D4N
9aed21c077
Merge pull request #133 from D4N/CVE-2017-14863_reproducer
...
Added reproducer for #132 / CVE-2017-14863
2017-10-29 23:41:36 +01:00
Dan Čermák
ecfbd58695
Added test output to bugfixes-test.out
2017-10-29 23:30:07 +01:00
Dan Čermák
ec55f74f68
Added reproducer for CVE-2017-14863 / #132 to the test suite
2017-10-29 23:28:57 +01:00
D4N
f6af59e054
Merge pull request #135 from D4N/CVE-2017-14865_reproducer
...
Added reproducer for #134 / CVE-2017-14865
2017-10-29 23:26:16 +01:00
Dan Čermák
673e391797
Addapted bugfixes-test.out
2017-10-29 22:33:23 +01:00
Dan Čermák
f7a403d8d9
Added reproducer for CVE-2017-14865 / #134 to the test suite
2017-10-29 22:31:17 +01:00
D4N
8a04b7683c
Merge pull request #130 from D4N/reproducer-for-54
...
Added reproducer for #54 / CVE-2017-11592 to the test suite
2017-10-29 10:50:19 +01:00
Dan Čermák
f4f05001e9
Updated bugfixes-test.out
2017-10-29 10:21:49 +01:00
Dan Čermák
35cb91a9f3
Added reproducer for #54 / CVE-2017-11592 to the test suite
2017-10-29 10:17:04 +01:00
Dan Čermák
091d4edbdb
Corrected bugfix test number #54 to #56
2017-10-29 10:17:04 +01:00
D4N
1c3f0dab5e
Merge pull request #128 from D4N/master
...
Added reproducer for #76 / CVE-2017-14857 to the testsuite
2017-10-29 10:09:29 +01:00
Dan Čermák
72b75ddfe4
Updated bugfixes-test.out
2017-10-19 00:42:42 +02:00
Dan Čermák
87e0c6ec53
Added reproducer for #76 to the testsuite
2017-10-19 00:42:11 +02:00
Luis Díaz Más
319ccdbc71
Merge pull request #119 from a17r/ccache
...
Add build switch to disable auto ccache
2017-10-16 12:34:54 +02:00
