Qualys Security Advisory 263c0ebdd8 proc/readproc.c: Harden fill_cgroup_cvt(). ...

Check the return value of snprintf(), otherwise dst may point
out-of-bounds when it reaches the end of the dst_buffer (the snprintf()
always returns 1 in that case, even if there is not enough space left),
and vMAX becomes negative and is passed to snprintf() as a size_t.

2018-05-19 07:32:22 +10:00

..

alloc.c

…

alloc.h

…

COPYING

…

devname.c

proc/devname.c: Never write more than "chop" (part 2).

2018-05-19 07:32:21 +10:00

devname.h

…

escape.c

proc/escape.c: Handle negative snprintf() return value.

2018-05-19 07:32:21 +10:00

escape.h

…

fprocopen.3

…

libprocps.pc.in

…

libprocps.sym

…

numa.c

…

numa.h

…

openproc.3

…

procps-private.h

…

procps.h

…

pwcache.c

…

pwcache.h

…

readproc.3

…

readproc.c

proc/readproc.c: Harden fill_cgroup_cvt().

2018-05-19 07:32:22 +10:00

readproc.h

…

readproctab.3

…

sig.c

proc/sig.c: Harden print_given_signals().

2018-05-19 07:32:21 +10:00

sig.h

…

slab.c

proc/slab.c: Initialize struct slab_info in get_slabnode().

2018-05-19 07:32:21 +10:00

slab.h

proc/slab.h: Fix off-by-one overflow in sscanf().

2018-05-19 07:32:21 +10:00

sysinfo.c

proc/sysinfo.c: Ensure null-termination in getstat().

2018-05-19 07:32:22 +10:00

sysinfo.h

…

version.c

…

version.h

…

wchan.c

…

wchan.h

…

whattime.c

proc/whattime.c: Always initialize buf.

2018-05-19 07:32:21 +10:00

whattime.h

…