procps/ps
Qualys Security Advisory 7dd7bdb09f ps/output.c: Always null-terminate outbuf in show_one_proc().
Before "strlen(outbuf)", if one of the pr_*() functions forgot to do it.
This prevents an out-of-bounds read in strlen(), and an out-of-bounds
write in "outbuf[sz] = '\n'". Another solution would be to replace
strlen() with strnlen(), but this is not used anywhere else in the
code-base and may not exist in all libc's.
2018-05-19 07:32:21 +10:00
..
common.h Closes: #9 ps: Remove Unix98 output limitations 2015-10-26 11:18:52 +11:00
COPYING license: update FSF addresses 2012-03-04 08:04:24 +11:00
display.c ps/display.c: Harden show_tree(). 2018-05-19 07:32:21 +10:00
global.c Closes: #9 ps: Remove Unix98 output limitations 2015-10-26 11:18:52 +11:00
HACKING docs: remove old information from HACKING 2012-01-13 22:42:38 +01:00
help.c ps: add -q/q/--quick-pid option 2014-07-10 21:24:19 +02:00
output.c ps/output.c: Always null-terminate outbuf in show_one_proc(). 2018-05-19 07:32:21 +10:00
parser.c misc: eliminate all those remaining gcc -Wall warnings 2017-05-22 21:34:32 +10:00
procps.1 Consolidated patch of previously merged CYGWIN support 2017-09-03 20:59:23 +10:00
ps.1 ps: add times & cputimes format specifiers: cumulative CPU time in seconds 2018-03-02 21:58:45 +11:00
regression procps 010114 2002-02-01 22:47:29 +00:00
select.c ps: add -q/q/--quick-pid option 2014-07-10 21:24:19 +02:00
sortformat.c misc: eliminate all those remaining gcc -Wall warnings 2017-05-22 21:34:32 +10:00
stacktrace.c misc: eliminate all those remaining gcc -Wall warnings 2017-05-22 21:34:32 +10:00