Denys Vlasenko 3d6f95ede6 whois: fix a possible out-of-bounds stack access ...

If fgets() returns incomplete string, we replace NUL with
'\n', and then trim() runs on a non-NUL-terminated buffer.
Prevent that.

While at it, bump buffer from 1k to 2k.

function                                             old     new   delta
query                                                519     524      +5

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

2018-09-04 14:48:00 +02:00

..

libiproute

ioctl(SIOCGIFINDEX) does not require clearing of entire ifr

2018-03-27 23:55:43 +02:00

ssl_helper

…

ssl_helper-wolfssl

…

udhcp

udhcpc: add a cooment about sanitizing DHCP_DOMAIN_NAME, no code changes

2018-08-01 13:36:36 +02:00

arp.c

…

arping.c

arping: code shrink

2018-02-11 21:16:24 +01:00

brctl.c

…

Config.src

restore documentation on the build config language

2018-06-06 15:16:48 +02:00

dnsd.c

…

ether-wake.c

…

ftpd.c

ftpd: allow -A if !FTPD_AUTHENTICATION as well

2018-04-07 14:18:42 +02:00

ftpgetput.c

wget,ftpd: shorten and reuse strings

2018-04-07 13:22:52 +02:00

hostname.c

…

httpd_helpers.sh

…

httpd_indexcgi.c

…

httpd_post_upload.cgi

Make POST upload example script easier to use

2016-12-22 15:33:11 +01:00

httpd_ssi.c

…

httpd.c

httpd: do not default to Content-type: application/octet-stream

2018-04-07 01:13:30 +02:00

ifconfig.c

networking/interface.c: get rid of global "smallint interface_opt_a"

2018-03-05 17:46:17 +01:00

ifenslave.c

…

ifplugd.c

ifplugd: close signal race

2018-04-29 13:46:49 +02:00

ifupdown.c

ifupdown: do not fail if interface disappears during ifdown

2018-03-28 00:02:52 +02:00

inetd.c

inetd,mount: add comment with example of flags to build with libtirpc

2018-02-13 18:20:28 +01:00

interface.c

networking/interface.c: get rid of global data

2018-03-05 18:30:33 +01:00

ip.c

ip: tweak --help text

2018-08-14 11:19:09 +02:00

ipcalc.c

…

isrv_identd.c

libbb: new option FEATURE_ETC_SERVICES: if off, /etc/services reads often avoided

2018-04-17 12:43:54 +02:00

isrv.c

…

isrv.h

…

Kbuild.src

…

nameif.c

…

nbd-client.c

…

nc_bloaty.c

nc: fix the !NC_SERVER configuration

2018-05-24 16:38:40 +02:00

nc.c

…

netstat.c

netstat: produce numeric-ip output for non-resolved names

2018-03-27 23:28:53 +02:00

nslookup.c

nslookup: add support for search domains, closes 11161

2018-08-01 19:42:46 +02:00

ntpd.c

ntpd: show real, unclamped delays on low-latency networks

2018-08-03 11:14:22 +02:00

ntpd.diff

…

parse_pasv_epsv.c

fix a thinko in parse_pasv_epsv.c

2018-02-06 17:11:15 +01:00

ping.c

ping: use setitimer() instead of ualarm()

2018-08-25 19:36:06 +02:00

pscan.c

…

route.c

ioctl(SIOCGIFINDEX) does not require clearing of entire ifr

2018-03-27 23:55:43 +02:00

slattach.c

…

ssl_client.c

ssl_client: fix option parsing

2018-03-20 11:41:51 +01:00

tc.c

ip: fix crash in "ip neigh show"

2018-02-08 08:42:37 +01:00

tcpudp_perhost.c

tcpudp: shrink per-host rate-limiting code

2018-02-27 13:03:44 +01:00

tcpudp_perhost.h

tcpudp: shrink per-host rate-limiting code

2018-02-27 13:03:44 +01:00

tcpudp.c

tcpsvd: fix fallout from opt_complementary removal

2018-03-11 23:02:50 +01:00

telnet.c

libbb: new option FEATURE_ETC_SERVICES: if off, /etc/services reads often avoided

2018-04-17 12:43:54 +02:00

telnetd.c

…

telnetd.ctrlSQ.patch

…

telnetd.IAC_test.sh

…

tftp.c

randomconfig fixes

2017-12-31 17:30:02 +01:00

tls_aes.c

…

tls_aes.h

…

tls_pstm_montgomery_reduce.c

…

tls_pstm_mul_comba.c

…

tls_pstm_sqr_comba.c

…

tls_pstm.c

…

tls_pstm.h

…

tls_rsa.c

…

tls_rsa.h

…

tls_symmetric.h

…

tls.c

tls: fix to handle X.509 v1 certificates correctly

2018-06-24 20:05:24 +02:00

tls.h

…

traceroute.c

Fix build failures if MAXHOSTNAMELEN or MAXPATHLEN is not defined

2017-10-31 15:59:19 +01:00

tunctl.c

…

vconfig.c

…

wget.c

wget: fix fetching of https URLs without http proxy

2018-07-02 18:31:02 +02:00

whois.c

whois: fix a possible out-of-bounds stack access

2018-09-04 14:48:00 +02:00

zcip.c

…