Qualys Security Advisory 344f6d3c0e proc/readproc.c: Harden stat2proc(). ...

1/ Use a "size_t num" instead of an "unsigned num" (also, do not store
the return value of sscanf() into num, it was unused anyway).

2/ Check the return value of strchr() and strrchr().

3/ Never jump over the terminating null byte with "S = tmp + 2".

2018-05-19 07:32:22 +10:00

..

alloc.c

proc/alloc.*: Use size_t, not unsigned int.

2018-05-19 07:32:21 +10:00

alloc.h

proc/alloc.*: Use size_t, not unsigned int.

2018-05-19 07:32:21 +10:00

COPYING

…

devname.c

proc/devname.c: Never write more than "chop" (part 2).

2018-05-19 07:32:21 +10:00

devname.h

…

escape.c

proc/escape.c: Handle negative snprintf() return value.

2018-05-19 07:32:21 +10:00

escape.h

…

fprocopen.3

…

libprocps.pc.in

…

libprocps.sym

…

numa.c

…

numa.h

library: build on non-glibc systems

2018-04-10 21:28:11 +10:00

openproc.3

…

procps-private.h

…

procps.h

…

pwcache.c

…

pwcache.h

…

readproc.3

…

readproc.c

proc/readproc.c: Harden stat2proc().

2018-05-19 07:32:22 +10:00

readproc.h

…

readproctab.3

…

sig.c

proc/sig.c: Harden print_given_signals().

2018-05-19 07:32:21 +10:00

sig.h

…

slab.c

proc/slab.c: Initialize struct slab_info in get_slabnode().

2018-05-19 07:32:21 +10:00

slab.h

proc/slab.h: Fix off-by-one overflow in sscanf().

2018-05-19 07:32:21 +10:00

sysinfo.c

proc/sysinfo.c: Ensure null-termination in getstat().

2018-05-19 07:32:22 +10:00

sysinfo.h

…

version.c

…

version.h

proc/version.h: Protect parameter in LINUX_VERSION() macro.

2018-05-19 07:32:21 +10:00

wchan.c

…

wchan.h

…

whattime.c

proc/whattime.c: Always initialize buf.

2018-05-19 07:32:21 +10:00

whattime.h

…