Skip to content
Snippets Groups Projects
  1. Oct 10, 2019
  2. Oct 08, 2019
  3. Oct 03, 2019
  4. Sep 09, 2019
  5. Aug 28, 2019
    • Timo Sirainen's avatar
      lib-managesieve: Make sure str_unescape() won't be writing past allocated memory · 10c5cbe8
      Timo Sirainen authored
      The previous commit should already prevent this, but this makes sure it
      can't become broken in the future either. It makes the performance a tiny
      bit worse, but that's not practically noticeable.
      10c5cbe8
    • Timo Sirainen's avatar
      lib-managesieve: Don't accept strings with NULs · 16e047c5
      Timo Sirainen authored
      ManageSieve doesn't allow NULs in strings.
      
      This fixes a bug with unescaping a string with NULs: str_unescape() could
      have been called for memory that points outside the allocated string,
      causing heap corruption. This could cause crashes or theoretically even
      result in remote code execution exploit.
      
      Found by Nick Roessler and Rafi Rubin
      16e047c5
  6. Aug 16, 2019
  7. Aug 12, 2019
  8. Aug 08, 2019
  9. Jul 31, 2019
  10. Jul 26, 2019
Loading

Consent

On this website, we use the web analytics service Matomo to analyze and review the use of our website. Through the collected statistics, we can improve our offerings and make them more appealing for you. Here, you can decide whether to allow us to process your data and set corresponding cookies for these purposes, in addition to technically necessary cookies. Further information on data protection—especially regarding "cookies" and "Matomo"—can be found in our privacy policy. You can withdraw your consent at any time.