Commit Graph

  • 6939463606 proc/readproc.c: Harden vectorize_this_str(). Qualys Security Advisory -
  • 39dcf47bc8 proc/readproc.c: Harden read_unvectored(). Qualys Security Advisory -
  • 36c350f07c proc/readproc.c: Fix bugs and overflows in file2strvec(). Qualys Security Advisory -
  • ccf8de0874 proc/readproc.c: Harden file2str(). Qualys Security Advisory -
  • 344f6d3c0e proc/readproc.c: Harden stat2proc(). Qualys Security Advisory -
  • 20269a4129 proc/readproc.c: Harden supgrps_from_supgids(). Qualys Security Advisory -
  • 6fb2bbaa0d proc/readproc.c: Harden status2proc(). Qualys Security Advisory -
  • 27e45cf43b proc/readproc.c: Fix the unhex() function. Qualys Security Advisory -
  • 920b0ada70 proc/sysinfo.c: Ensure null-termination in getstat(). Qualys Security Advisory -
  • 015669383f ps/sortformat.c: Avoid "sep_loc + 1" when sep_loc is NULL. Qualys Security Advisory -
  • bb89dad867 ps/sortformat.c: Handle large width in aix_format_parse(). Qualys Security Advisory -
  • cde22815af ps/sortformat.c: Catch negative width in format_parse(). Qualys Security Advisory -
  • db00f54f4a ps/sortformat.c: Double-check chars in verify_short_sort(). Qualys Security Advisory -
  • afca7eee75 ps/display.c: Fix "move process-only flags to the process". Qualys Security Advisory -
  • 2e4a594221 ps/display.c: Always exit from signal_handler(). Qualys Security Advisory -
  • 7dd7bdb09f ps/output.c: Always null-terminate outbuf in show_one_proc(). Qualys Security Advisory -
  • db25d0375a ps/output.c: Protect outbuf in various pr_*() functions. Qualys Security Advisory -
  • 14e0247ea5 ps/output.c: Enforce a safe range for max_rightward. Qualys Security Advisory -
  • 1d9ddb615a ps/output.c: Replace strcpy() with snprintf() in show_one_proc(). Qualys Security Advisory -
  • 97408d8b10 ps/output.c: Remove the page_shift variable. Qualys Security Advisory -
  • e66bf564f8 ps/output.c: Check return value of mmap() in init_output(). Qualys Security Advisory -
  • bb9c217f29 ps/display.c: Harden show_tree(). Qualys Security Advisory -
  • 136e372495 ps/output.c: Fix outbuf overflows in pr_args() etc. Qualys Security Advisory -
  • d31f5eb545 ps/output.c: Harden forest_helper(). Qualys Security Advisory -
  • 62f19dc5df proc/escape.c: Handle negative snprintf() return value. Qualys Security Advisory -
  • 7efa102248 proc/escape.c: Prevent buffer overflows in escape_command(). Qualys Security Advisory -
  • 37ce162604 proc/escape.c: Prevent integer overflows in escape_str_utf8(). Qualys Security Advisory -
  • 8d359b04ab proc/escape.c: Handle negative wcwidth() return value. Qualys Security Advisory -
  • 47303a3592 proc/escape.c: Make sure all escape*() arguments are safe. Qualys Security Advisory -
  • 00ab5f0b32 proc/whattime.c: Always initialize buf. Qualys Security Advisory -
  • 7382ac88d5 proc/slab.c: Initialize struct slab_info in get_slabnode(). Qualys Security Advisory -
  • a33be33885 proc/sysinfo.c: Fix off-by-one in get_pid_digits(). Qualys Security Advisory -
  • 8136a7a664 proc/sysinfo.c: Prevent integer overflow of realloc() size. Qualys Security Advisory -
  • 5b6ab39c6d proc/slab.c: Check correct number of items after sscanf(). Qualys Security Advisory -
  • 3ccc6ed262 proc/slab.h: Fix off-by-one overflow in sscanf(). Qualys Security Advisory -
  • bf12b14db9 proc/sig.c: Harden print_given_signals(). Qualys Security Advisory -
  • 3244e7ddb0 proc/devname.c: Never write more than "chop" (part 2). Qualys Security Advisory -
  • 6b7ceb36a4 proc/devname.c: Never write more than "chop" characters. Qualys Security Advisory -
  • 730bdc33e7 proc/devname.c: Prevent off-by-one overflow in dev_to_tty(). Qualys Security Advisory -
  • 9f59bd5c52 proc/devname.c: Use snprintf() in link_name(). Qualys Security Advisory -
  • 59666e6255 proc/version.h: Protect parameter in LINUX_VERSION() macro. Qualys Security Advisory -
  • f1077b7a55 proc/alloc.*: Use size_t, not unsigned int. Qualys Security Advisory -
  • 98b79d1ef1 proc/alloc.c: Use vfprintf(), not fprintf(). Qualys Security Advisory -
  • 7941bb512a proc/readproc.c: Add checks to get_ns_name() and get_ns_id(). Qualys Security Advisory -
  • 3ce9f837a3 proc/sig.c: Fix the strtosig() function. Qualys Security Advisory -
  • 7367c4b1fd skill: Do not scan past the null-terminator in check_proc(). Qualys Security Advisory -
  • a9ee0bf622 skill: Check return value of str*chr() in check_proc(). Qualys Security Advisory -
  • 52673d2fc7 skill: Properly null-terminate buf in check_proc(). Qualys Security Advisory -
  • 37547e9f5f skill: Check the return value of fstat(). Qualys Security Advisory -
  • 858df7cc89 skill: Prevent multiple overflows in ENLIST(). Qualys Security Advisory -
  • 56e696ca5f skill: Fix double-increment of pid_count. Qualys Security Advisory -
  • b019fdba5c skill: Remove unused NEXTARG macro. Qualys Security Advisory -
  • 0e1964bfbc skill: Always NULL-terminate argv. Qualys Security Advisory -
  • 453e1df5d1 skill: Fix getline() usage. Qualys Security Advisory -
  • 7d6977b6f7 skill: Simplify the kill_main() loop. Qualys Security Advisory -
  • daec51a06c pwdx: Fix a misleading comment. Qualys Security Advisory -
  • 6df9ffb341 pidof: Prevent integer overflows with grow_size(). Qualys Security Advisory -
  • ab8b3881a0 pidof: Do not memleak pidof_root if multiple -c options. Qualys Security Advisory -
  • bba9f384c0 pidof: Do not skip the NULL terminator in cmdline. Qualys Security Advisory -
  • 6cadda2b4f pidof: Get the arg1 base name with get_basename(). Qualys Security Advisory -
  • 6f2f033142 pidof: Do not memleak the contents of proc_t. Qualys Security Advisory -
  • 031bc56f65 tload: Prevent integer overflows of ncols, nrows, and scr_size. Qualys Security Advisory -
  • 4c346cf594 tload: Prevent a buffer overflow when row equals nrows. Qualys Security Advisory -
  • d5442e10a7 tload: Use snprintf() instead of sprintf(). Qualys Security Advisory -
  • afbb0f4886 tload: Call longjmp() 1 instead of 0. Qualys Security Advisory -
  • 7664d9f306 tload: Use standard names instead of numbers. Qualys Security Advisory -
  • 5f3c071cd3 slabtop: Reset slab_list if get_slabinfo() fails. Qualys Security Advisory -
  • 2fc42db322 uptime: Check the return value of various functions. Qualys Security Advisory -
  • b51ca2a1f8 pgrep: Prevent a potential stack-based buffer overflow. Qualys Security Advisory -
  • 40c4254318 pgrep: Always null-terminate the cmd*[] buffers. Qualys Security Advisory -
  • 35f58d8a3e pgrep: Initialize the cmd*[] stack buffers. Qualys Security Advisory -
  • d0d902f089 pgrep: Simplify the match_*() functions. Qualys Security Advisory -
  • 5d2b44eaf6 pgrep: Replace buf+1 with buf in read_pidfile(). Qualys Security Advisory -
  • c1dbd41d2b pgrep: Replace ints with longs in strict_atol(). Qualys Security Advisory -
  • 4ea5b22d62 pgrep: Prevent integer overflow of list size. Qualys Security Advisory -
  • 657053f5d0 pgrep: Do not memleak the contents of proc_t. Qualys Security Advisory -
  • ef03c89447 misc: Move NEWS item to correct version Craig Small 2018-05-06 09:55:56 +10:00
  • 61a9a54229 library: check not undef SIGLOST Craig Small 2018-05-03 21:06:05 +10:00
  • 1f95cfe8a6 NEWS: note build on non-glibc systems _____ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • cf7c795c2a update translations _______________________ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • f28d605a0d free: fix scaling on 32-bit systems _______ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • 5fee15fcb6 misc: Update news about #91 _______________ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • 0e5c4373f4 Revert Support running with child namespace (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • ac73415e32 pgrep: Don't segfault with no match _______ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • 036ab9a3dd misc: Update translation from Trans project (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • c7b7ab8547 3.3.13 release candidate 1 ________________ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • d1e2373c3c misc: Update translations _________________ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • 1f27f3fb61 misc: update NEWS with some missed items __ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • 479b9e54b1 misc: Add some link examples to sysctl.conf (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • fb44ecf12f docs: Note limitation of pidof find scripts (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • 39980d6e31 watch: use sysconf() for hostname length __ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • 583472be8b sysctl: fix typo in help __________________ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • fcd97e6a62 docs: Reword --exec option in watch.1 _____ (catch up) Jim Warner 2018-04-11 00:00:00 -05:00
  • b0908eec4b library: replace the troublesome '__BEGIN_DECLS' macro Jim Warner 2018-04-06 00:00:00 -05:00
  • bae272fe22 library: eliminate inappropriate '__BEGIN_DECLS' macro Jim Warner 2018-04-06 00:00:00 -05:00
  • c683d9fe48 procio: fixed grammar in man page plus program comment Jim Warner 2018-04-03 00:00:00 -06:00
  • 06afd10525 procio: remove glibc dependency & make a proper header Jim Warner 2018-04-02 00:00:00 -06:00
  • c2a29d370c sysctl: relocate the procio code to a more proper home Jim Warner 2018-04-01 00:00:00 -06:00
  • 5d8746b941 misc: fix ps etime tests Craig Small 2018-04-10 22:09:40 +10:00
  • 75bd099420 library: check not undef SIGLOST Craig Small 2018-05-03 21:06:05 +10:00