Andy Ragusa
006a31f291
Removed unneeded function that was going to replace GETD and GETD2 macros.
6 years ago
Andy Ragusa
013129b484
Added FREE macro to sis parser, to avoid having to set ptrs to NULL every time it is freed.
6 years ago
Andy Ragusa
586bf63b4a
Modified GETD and GETD2 macros to check for -1 on read. Modifies the sys file parser.
6 years ago
Andrew
d74d0386e4
Replacing cli_crt member initialization with memset (per CR feedback)
6 years ago
Andrew
a0980389a7
Fix uninitialized memory usage in PE cert parsing
...
Fixes:
==123806== Conditional jump or move depends on uninitialised value(s)
==123806== at 0x50C4A65: crtmgr_whitelist_lookup (crtmgr.c:107)
==123806== by 0x50C4F36: crtmgr_lookup (crtmgr.c:161)
==123806== by 0x50CC003: asn1_get_x509 (asn1.c:1053)
...
==123806== Uninitialised value was created by a stack allocation
==123806== at 0x50CA335: asn1_get_x509 (asn1.c:723)
hashtype and issuer were not getting set prior to the check
for duplicates when processing embedded certs, which means
some certs that were actually duplicates could have been added
multiple times to the list of trusted certs based on the
contents of the unitialized memory backing those (harmless,
but not as efficient).
6 years ago
Micah Snyder
fff06e4736
Adds a new Jenkins pipeline that invokes QA test pipelines in parallel after build-acceptance creates build artifacts.
6 years ago
Micah Snyder
fafb289875
Adding pass-through Jenkinsfile to trigger build-acceptance testing.
6 years ago
Micah Snyder
bbfe42e133
Correcting use of unsigned variable to a signed off_t variable in calculation that was intended to result in a negative number but failed on 32bit platforms without a cast.
6 years ago
Micah Snyder
4c8bbfd087
Fix to alleviate circular dependency between readdb.h and matcher.h
6 years ago
Micah Snyder
9baa0ad708
Fixes to alleviate warnings with regards to mempool usage.
6 years ago
Micah Snyder
04c12bd67d
Added parenthesis to silence warning caused by setting variable in an if-statement. Added some inline documentation to explain the purpose of the actions feature and how to use it.
6 years ago
Micah Snyder
ae3aede6ff
Fix for bad format string, identified by coverity.
6 years ago
Micah Snyder
53c2cb1b02
Error handling improvements in bytecode api function to alleviate coverity complaints.
6 years ago
Micah Snyder
88ce6b8170
Fix to dereference pdf pointer after NULL check, not before.
6 years ago
Micah Snyder
db8c65fc55
Correction to temp name generator when prefix is used to remove possible leak of malloced string where length is 0.
6 years ago
Micah Snyder
28d0940ff3
Correction to vba ctx cleanup logic to prevent possible null dereference.
6 years ago
Micah Snyder
b849df5cd1
Address coverity concern regarding potential null pointer. Now using the daily db pointers to indicate existence of database.
6 years ago
Micah Snyder
4a8aad9f3d
Converted off_t types in HWP parser to size_t, both for correctness as these offsets may never be negative and to eliminate compile warnings.
6 years ago
Micah Snyder
97a0647e88
Additional variable type changes for correctness and to silence warnings. A handful of other minor changes to silence warnings. Corrected a number of function definitions so they return cl_error_t rather than int.
6 years ago
Micah Snyder
53e3045bf4
Return code checking corrections to regex suffix code.
6 years ago
Micah Snyder
95f456424a
Variable type corrections for pcre/pcre2 code.
6 years ago
Micah Snyder
280c298775
DLP module length values converted from int to size_t.
6 years ago
Micah Snyder
9e268996a7
json api return types converted to cl_error_t from int
6 years ago
Micah Snyder
4524c398f3
Argument and return types for fmap_readn(), cli_writen(), cli_readn() converted to use size_t instead of int.
6 years ago
Micah Snyder
ca8b4c466e
Assortment of warning fixes.
6 years ago
Micah Snyder
ee40795fe2
Converted mpool calls to macros when USE_MPOOL is defined to clearly differentiate between function and macro behavior.
6 years ago
Micah Snyder
5f4f69102d
Correcting types from int to cl_error_t where appropriate. Eliminating unused variables and referencing unused parameters to remove warnings.
6 years ago
Micah Snyder
8c37c1a081
Added egg extraction readability improvements. Moved the posix file mode printing code into a separate function. Added comments that explain to-do items to support solid archive extraction.
6 years ago
Micah Snyder
35c4774ef1
Adds fixes to prevent memory leaks if realloc fails.
6 years ago
Micah Snyder
1606ce043c
Converted egg parser to use cl_error_t instead of cl_egg_error_t.
6 years ago
Micah Snyder
8d30642000
Disabling LZMA decompression for EGG archives, because it currently fails with an error message that isn't very user friendly.
6 years ago
Micah Snyder
b53bf13b00
Fixed Egg parser support for parsing archive comment headers and elimited potential infinite loop bug.
6 years ago
Micah Snyder
bdbfbf10ad
Autojunk'd, to include libiconv detection changes.
6 years ago
Micah Snyder
0450e68551
Added new EGG archive extraction feature, written from scratch based on ESTsoft's EGG archive specification.
...
EGG extraction support includes deflate, bzip2, and lzma decompression. AZO (LZO?) decompression not yet supported. Solid archives not yet supported. Split archives may have some limited success.
This commit also includes updates to autoconf iconv.m4 file enable detection of libiconv in alternative install locations.
6 years ago
Micah Snyder
e3867c1207
Fix to cert utils for mac for compatibility with Openssl 1.1.0+ wherein the X509 structure is now opaque and the name cannot be directly referenced.
6 years ago
Micah Snyder
559df75c9f
Autojunk'd
6 years ago
Micah Snyder
dd45df902a
Fix so the linux cert util compiles.
6 years ago
Micah Snyder
5f71cae2f2
Moved AC_PROG_OBJC out of conditional.
6 years ago
Micah Snyder
5bd5e9ec1c
Windows fixes for TLS certificate caching.
6 years ago
Micah Snyder
c3cc2841e7
Autojunk'd
6 years ago
Micah Snyder
352248f608
Moving Windows cert verification to shared directory, and adding macOS cert verification support.
6 years ago
Micah Snyder (micasnyd)
88d271cbf5
Added pdf max object checks to limit max # of objects but continue scanning those that have already been found.
6 years ago
Micah Snyder
0c555069fa
fuzz - 13495 - Fix for memory leak due to lacking error handling when normalizing javascript.
6 years ago
Micah Snyder
730032dc8a
fuzz - 13045 - Fix for possible integer overflow in cli_scanrtf.
6 years ago
Micah Snyder
72f680b04a
fuzz - 13785 - Check to detect potential integer overflow in cli_html_normalise.
6 years ago
Micah Snyder
8376c5f3c7
fuzz - 14519 - Fix for peinfo memory leak in cli_peheader error condition.
6 years ago
Micah Snyder (micasnyd)
cafa0bf368
Updated libmspack 0.8alpha to 0.10.1alpha. Only different from vanilla is that we add a config.h.in file.
6 years ago
Micah Snyder
df52009b40
pdf.c formatting fixes.
6 years ago
Clement Lecigne
3e77daa791
pdf: fix octal conversion in pdf_readstring.
6 years ago
Clement Lecigne
e2b774d791
pdf: handle dictionary object with newlines.
6 years ago