Commit Graph

  • 990ea89ae9 0080-proc/readproc.c: Harden openproc(). Qualys Security Advisory -
  • c03e52786d 0078-proc/readproc.c: Harden simple_nextpid(). Qualys Security Advisory -
  • ed463c7d88 0077-proc/readproc.c: Harden fill_cgroup_cvt(). Qualys Security Advisory -
  • 1052091107 0076-proc/readproc.c: Harden vectorize_this_str(). Qualys Security Advisory -
  • d9c0a3e36f 0075-proc/readproc.c: Harden read_unvectored(). Qualys Security Advisory -
  • 86d3d37406 0074-proc/readproc.c: Fix bugs and overflows in file2strvec(). Qualys Security Advisory -
  • 0bc48f7af7 0073-proc/readproc.c: Harden file2str(). Qualys Security Advisory -
  • 7c09d76e9b 0072-proc/readproc.c: Harden stat2proc(). Qualys Security Advisory -
  • ec0cb25af6 0071-proc/readproc.c: Harden supgrps_from_supgids(). Qualys Security Advisory -
  • 807498f899 0070-proc/readproc.c: Harden status2proc(). Qualys Security Advisory -
  • 0753b86931 0069-proc/readproc.c: Fix the unhex() function. Qualys Security Advisory -
  • 1e48648b82 0051-proc/escape.c: Prevent buffer overflows in escape_command(). Qualys Security Advisory -
  • 1eddce14c3 0050-proc/escape.c: Prevent integer overflows in escape_str_utf8(). Qualys Security Advisory -
  • 8f49e98a3f 0049-proc/escape.c: Handle negative wcwidth() return value. Qualys Security Advisory -
  • 1ecf125d3f 0048-proc/escape.c: Make sure all escape*() arguments are safe. Qualys Security Advisory -
  • efae601c3c 0047-proc/whattime.c: Always initialize buf. Qualys Security Advisory -
  • d1729bed6b 0042-proc/slab.h: Fix off-by-one overflow in sscanf(). Qualys Security Advisory -
  • d3ff255fa5 0041-proc/sig.c: Harden print_given_signals(). Qualys Security Advisory -
  • 69b67b6f6e 0040-proc/devname.c: Never write more than "chop" (part 2). Qualys Security Advisory -
  • 0e365c8930 0039-proc/devname.c: Never write more than "chop" characters. Qualys Security Advisory -
  • a3111efa71 0038-proc/devname.c: Prevent off-by-one overflow in dev_to_tty(). Qualys Security Advisory -
  • 170397d59c 0037-proc/devname.c: Use snprintf() in link_name(). Qualys Security Advisory -
  • 50b343e068 0032-proc/sig.c: Fix the strtosig() function. Qualys Security Advisory -
  • e1eaf83b34 misc: Tell po4a to handle email macros Craig Small 2018-06-07 21:52:46 +10:00
  • cf057d2fe5 top: provide the means to exploit a 256-color terminal Jim Warner 2018-06-04 00:00:00 -05:00
  • 3352bddba5 library: tweak that change to 'supgrps_from_supgids()' Jim Warner 2018-06-01 00:00:00 -05:00
  • f9a8009e27 library: avoid problems involving 'supgid' mishandling Jim Warner 2018-05-30 00:00:00 -05:00
  • 336d4ab90e docs: Tidying of ps,kill and skill manpages Bjarni Ingi Gislason 2018-05-31 21:18:27 +10:00
  • c51b329a32 docs: use correct units in free.1 Craig Small 2018-05-31 20:34:13 +10:00
  • fe23360520 top: sanitized some potentially corrupt 'Inspect' data Jim Warner 2018-05-25 00:00:00 -05:00
  • 434530a038 top: prevent buffer overruns in 'inspection_utility()' Jim Warner 2018-05-24 00:00:00 -05:00
  • a42742b0df top: add another field sanity check in 'config_file()' Jim Warner 2018-05-23 00:00:00 -05:00
  • cc5c9e6c1e top: don't mess with groff line length in man document Jim Warner 2018-05-20 00:00:00 -05:00
  • 76b692c440 misc: add asc sign files to ignore Craig Small 2018-05-31 20:28:20 +10:00
  • 7bb949bcba library: Bump API to 8:0:1 Craig Small 2018-05-20 07:35:37 +10:00
  • 59c5133ff1 misc: Reorder NEWS Craig Small 2018-05-20 07:34:17 +10:00
  • 14005a371e ps: Increase command selection field to 64 Craig Small 2018-05-19 22:10:11 +10:00
  • 2fed385ac2 testsuite: Remove pgrep ?15 char test Craig Small 2018-05-19 21:50:21 +10:00
  • c699f2e26d top: just respond to the increased command name length Jim Warner 2018-05-19 00:00:00 -05:00
  • 607edc2064 top: eliminate a couple of warnings of -Wunused-result Jim Warner 2018-05-18 00:00:00 -05:00
  • de807a639f top: ensure sane rcfile values for the remaining stuff Jim Warner 2018-05-18 00:00:00 -05:00
  • 129b7e2b44 top: Prevent out-of-bounds writes in PUFF(). __Tweaked Jim Warner 2018-05-18 00:00:00 -05:00
  • d34c6eb5b4 top: address 'show_special()' o-o-b read/write concern Jim Warner 2018-05-18 00:00:00 -05:00
  • 2fb269a5b0 top: Fix out-of-bounds read/write in show_... REVERTED Jim Warner 2018-05-18 00:00:00 -05:00
  • fdb58974e2 top: prevent buffer overflow potential in all routines Jim Warner 2018-05-18 00:00:00 -05:00
  • 72ddc1c33d top: Prevent buffer overflow in calibrate_... REVERTED Jim Warner 2018-05-18 00:00:00 -05:00
  • c502678715 top: Protect scat() from buffer overflows. ___REVERTED Jim Warner 2018-05-18 00:00:00 -05:00
  • 59f39da852 top: concede integer overflow risks in procs_refresh() Jim Warner 2018-05-18 00:00:00 -05:00
  • c9dfcdebdc top: Prevent integer overflows in procs_re... REVERTED Jim Warner 2018-05-18 00:00:00 -05:00
  • 3b2235c266 top: check sortindx risk exposure (not treat symptoms) Jim Warner 2018-05-18 00:00:00 -05:00
  • fb8cee585f top: Check sortindx. _________________________REVERTED Jim Warner 2018-05-18 00:00:00 -05:00
  • 53e2654726 top: other graph_cpus, graph_mems, and summ_mscale fix Jim Warner 2018-05-18 00:00:00 -05:00
  • d1fbc5fbd4 top: Check graph_cpus, graph_mems, and sum... REVERTED Jim Warner 2018-05-18 00:00:00 -05:00
  • e531c78140 top: Do not default to the cwd in configs_r... Tweaked Jim Warner 2018-05-18 00:00:00 -05:00
  • c32ab58b94 pgrep: Remove >15 warning Craig Small 2018-05-19 08:14:06 +10:00
  • 52dc8dcdea misc: Update NEWS with CVE and library changes Craig Small 2018-05-19 08:11:23 +10:00
  • 2cfdbbe897 library: Increase comm length to 64 Craig Small 2018-05-19 08:04:19 +10:00
  • 0151441e15 w: Check return values in print_logintime(). Qualys Security Advisory -
  • ed3cf6988a w: Replace printf() with fprintf(fout) in print_time_ival7(). Qualys Security Advisory -
  • 059ae8b512 top: Prevent out-of-bounds writes in PUFF(). Qualys Security Advisory -
  • ed8f6d9cc6 top: Fix out-of-bounds read/write in show_special(). Qualys Security Advisory -
  • 6b8b102cf2 top: Harden calibrate_fields(). Qualys Security Advisory -
  • c424a64331 top: Prevent buffer overflow in calibrate_fields(). Qualys Security Advisory -
  • a71ac048e6 top: Impose a minimum on Screen_cols. Qualys Security Advisory -
  • b4d068e624 top: Prevent integer overflow in adj_geometry(). Qualys Security Advisory -
  • 23baeb1175 top: Limit Width_mode to SCREENMAX. Qualys Security Advisory -
  • 8ab8c1a469 top: Prevent integer overflows in config_file() and other_selection(). Qualys Security Advisory -
  • 9c745975b2 top: Protect scat() from buffer overflows. Qualys Security Advisory -
  • 0847390b83 top: Always exit from sig_abexit(). Qualys Security Advisory -
  • 7fc7062127 top: Initialize struct sigaction in before(). Qualys Security Advisory -
  • d69966962c top: Fix snprintf() call in capsmk(). Qualys Security Advisory -
  • 131e5e2fe6 top: Prevent integer overflows in procs_refresh(). Qualys Security Advisory -
  • b6be15d3cb top: Initialize cp in task_show(). Qualys Security Advisory -
  • 713381b10d top: Protect macro parameters. Qualys Security Advisory -
  • d5b8ac7139 top: Check sortindx. Qualys Security Advisory -
  • bbe58d7e0a top: Check width and col. Qualys Security Advisory -
  • 97a989cbcd top: Check Rc.fixed_widest. Qualys Security Advisory -
  • cd8ba5670e top: Check graph_cpus, graph_mems, and summ_mscale. Qualys Security Advisory -
  • bd91bbf7f1 top: Check i when setting Curwin in config_file(). Qualys Security Advisory -
  • b45c4803dd top: Do not default to the cwd in configs_read(). Qualys Security Advisory -
  • e877d4f4c4 top: Fix double-fclose() in configs_read(). Qualys Security Advisory -
  • 8476e6f4f9 pmap: Fix extended mode in one_proc(). Qualys Security Advisory -
  • 6e4eade3d4 pmap: Plug mem- and fd-leak in one_proc(). Qualys Security Advisory -
  • 32e57dbb88 pmap: Remove dead code in mapping_name(). Qualys Security Advisory -
  • c9241d85ac pmap: Harden one_proc(). Qualys Security Advisory -
  • 737fbff0e6 pmap: Check sscanf() in discover_shm_minor(). Qualys Security Advisory -
  • 8c84870d83 pmap: Fix output format of VmFlags. Qualys Security Advisory -
  • 62de3a2aa7 pmap: Prevent buffer overflow in sscanf(). Qualys Security Advisory -
  • 0d9d0a5206 pmap: Always check the return value of fgets(). Qualys Security Advisory -
  • 6f82fa2b04 pmap: Fix parsing error in config_read(). Qualys Security Advisory -
  • c6e427d22e pmap: Prevent integer overflow in main(). Qualys Security Advisory -
  • db2f011895 pmap: Plug memory leak in range_arguments(). Qualys Security Advisory -
  • 14758ebc8f proc/readproc.c: Work around a design flaw in readeither(). Qualys Security Advisory -
  • 94eebb03b5 proc/readproc.c: Prevent integer overflows in readproctab*(). Qualys Security Advisory -
  • a013f6e020 proc/readproc.c: Fix double-free()s in readtask(). Qualys Security Advisory -
  • 1539c13507 proc/readproc.c: Fix use-after-free in readproctab2(). Qualys Security Advisory -
  • a4d82a2c2c proc/readproc.c: Harden openproc(). Qualys Security Advisory -
  • 19849a45e0 proc/readproc.c: Harden get_proc_stats(). Qualys Security Advisory -
  • 1b8ec51013 proc/readproc.c: Harden simple_nextpid(). Qualys Security Advisory -
  • 263c0ebdd8 proc/readproc.c: Harden fill_cgroup_cvt(). Qualys Security Advisory -