Micah Snyder
ad6e0f70cb
Adds unzip parser code readability improvements; doxygen function comments.
6 years ago
Micah Snyder (micasnyd)
5383eeae49
Adds 3 valgrind suppression rules to ignore the wcsrtombs false positive in UnRAR's unicode.cpp (see line 40).
6 years ago
Andrew
1643b4a114
Support the ternary operators (AutoIt script extraction)
...
There are a few other unsupported op codes, but we'll need
to investigate more to determine what to do with them.
6 years ago
Mickey Sola
e044303b5f
oss-fuzz - fixup fixes for ole2 and macho based on review
6 years ago
Mickey Sola
7c9676f435
oss-fuzz - 13649 - add 64bit typecast when searching hashtable to ensure constant-val leftshift will always fit as expected, regardless of architecture
6 years ago
Mickey Sola
622771bd58
oss-fuzz - 13468 - fix shift of negative value when converting from unicode
6 years ago
Mickey Sola
2603adddbc
oss-fuzz - 13507 - add 32-bit section alignment size sanity check and appropriate evasion heuristic while scanning mach-o executables
6 years ago
Mickey Sola
f5574b6f48
oss-fuzz - 13509 - fix type sizes for base64 character encoding and screnc buffer tag lengths
6 years ago
Mickey Sola
15167db0f9
oss-fuzz - 13609 - fix int overflow while reading ole2 blocks
6 years ago
Andy Ragusa
74a549a081
Removed manually setting ptrs to NULL, since that is done in the FREE macro.
6 years ago
Andy Ragusa
519c58c6da
Merged GETD and GETD2 macros, since the only difference was a free of the 'ptrs' variable. Also fixed error handling to catch the -1 return code.
6 years ago
Andy Ragusa
006a31f291
Removed unneeded function that was going to replace GETD and GETD2 macros.
6 years ago
Andy Ragusa
013129b484
Added FREE macro to sis parser, to avoid having to set ptrs to NULL every time it is freed.
6 years ago
Andy Ragusa
586bf63b4a
Modified GETD and GETD2 macros to check for -1 on read. Modifies the sys file parser.
6 years ago
Andrew
d74d0386e4
Replacing cli_crt member initialization with memset (per CR feedback)
6 years ago
Andrew
a0980389a7
Fix uninitialized memory usage in PE cert parsing
...
Fixes:
==123806== Conditional jump or move depends on uninitialised value(s)
==123806== at 0x50C4A65: crtmgr_whitelist_lookup (crtmgr.c:107)
==123806== by 0x50C4F36: crtmgr_lookup (crtmgr.c:161)
==123806== by 0x50CC003: asn1_get_x509 (asn1.c:1053)
...
==123806== Uninitialised value was created by a stack allocation
==123806== at 0x50CA335: asn1_get_x509 (asn1.c:723)
hashtype and issuer were not getting set prior to the check
for duplicates when processing embedded certs, which means
some certs that were actually duplicates could have been added
multiple times to the list of trusted certs based on the
contents of the unitialized memory backing those (harmless,
but not as efficient).
6 years ago
Micah Snyder
fff06e4736
Adds a new Jenkins pipeline that invokes QA test pipelines in parallel after build-acceptance creates build artifacts.
6 years ago
Micah Snyder
fafb289875
Adding pass-through Jenkinsfile to trigger build-acceptance testing.
6 years ago
Micah Snyder
bbfe42e133
Correcting use of unsigned variable to a signed off_t variable in calculation that was intended to result in a negative number but failed on 32bit platforms without a cast.
6 years ago
Micah Snyder
4c8bbfd087
Fix to alleviate circular dependency between readdb.h and matcher.h
6 years ago
Micah Snyder
9baa0ad708
Fixes to alleviate warnings with regards to mempool usage.
6 years ago
Micah Snyder
04c12bd67d
Added parenthesis to silence warning caused by setting variable in an if-statement. Added some inline documentation to explain the purpose of the actions feature and how to use it.
6 years ago
Micah Snyder
ae3aede6ff
Fix for bad format string, identified by coverity.
6 years ago
Micah Snyder
53c2cb1b02
Error handling improvements in bytecode api function to alleviate coverity complaints.
6 years ago
Micah Snyder
88ce6b8170
Fix to dereference pdf pointer after NULL check, not before.
6 years ago
Micah Snyder
db8c65fc55
Correction to temp name generator when prefix is used to remove possible leak of malloced string where length is 0.
6 years ago
Micah Snyder
28d0940ff3
Correction to vba ctx cleanup logic to prevent possible null dereference.
6 years ago
Micah Snyder
b849df5cd1
Address coverity concern regarding potential null pointer. Now using the daily db pointers to indicate existence of database.
6 years ago
Micah Snyder
4a8aad9f3d
Converted off_t types in HWP parser to size_t, both for correctness as these offsets may never be negative and to eliminate compile warnings.
6 years ago
Micah Snyder
97a0647e88
Additional variable type changes for correctness and to silence warnings. A handful of other minor changes to silence warnings. Corrected a number of function definitions so they return cl_error_t rather than int.
6 years ago
Micah Snyder
53e3045bf4
Return code checking corrections to regex suffix code.
6 years ago
Micah Snyder
95f456424a
Variable type corrections for pcre/pcre2 code.
6 years ago
Micah Snyder
280c298775
DLP module length values converted from int to size_t.
6 years ago
Micah Snyder
9e268996a7
json api return types converted to cl_error_t from int
6 years ago
Micah Snyder
4524c398f3
Argument and return types for fmap_readn(), cli_writen(), cli_readn() converted to use size_t instead of int.
6 years ago
Micah Snyder
ca8b4c466e
Assortment of warning fixes.
6 years ago
Micah Snyder
ee40795fe2
Converted mpool calls to macros when USE_MPOOL is defined to clearly differentiate between function and macro behavior.
6 years ago
Micah Snyder
5f4f69102d
Correcting types from int to cl_error_t where appropriate. Eliminating unused variables and referencing unused parameters to remove warnings.
6 years ago
Micah Snyder
8c37c1a081
Added egg extraction readability improvements. Moved the posix file mode printing code into a separate function. Added comments that explain to-do items to support solid archive extraction.
6 years ago
Micah Snyder
35c4774ef1
Adds fixes to prevent memory leaks if realloc fails.
6 years ago
Micah Snyder
1606ce043c
Converted egg parser to use cl_error_t instead of cl_egg_error_t.
6 years ago
Micah Snyder
8d30642000
Disabling LZMA decompression for EGG archives, because it currently fails with an error message that isn't very user friendly.
6 years ago
Micah Snyder
b53bf13b00
Fixed Egg parser support for parsing archive comment headers and elimited potential infinite loop bug.
6 years ago
Micah Snyder
bdbfbf10ad
Autojunk'd, to include libiconv detection changes.
6 years ago
Micah Snyder
0450e68551
Added new EGG archive extraction feature, written from scratch based on ESTsoft's EGG archive specification.
...
EGG extraction support includes deflate, bzip2, and lzma decompression. AZO (LZO?) decompression not yet supported. Solid archives not yet supported. Split archives may have some limited success.
This commit also includes updates to autoconf iconv.m4 file enable detection of libiconv in alternative install locations.
6 years ago
Micah Snyder
e3867c1207
Fix to cert utils for mac for compatibility with Openssl 1.1.0+ wherein the X509 structure is now opaque and the name cannot be directly referenced.
6 years ago
Micah Snyder
559df75c9f
Autojunk'd
6 years ago
Micah Snyder
dd45df902a
Fix so the linux cert util compiles.
6 years ago
Micah Snyder
5f71cae2f2
Moved AC_PROG_OBJC out of conditional.
6 years ago
Micah Snyder
5bd5e9ec1c
Windows fixes for TLS certificate caching.
6 years ago