wireguard-openbsd/lib/libevent/buffer.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libevent/buffer.c?h=jd%2Fqueueboosts 2019-05-03T16:31:34Z Fixed endless loop/ OOB write on 64 bit systems with large buffers. 2019-05-03T16:31:34Z tobias tobias@openbsd.org 2019-05-03T16:31:34Z urn:sha1:dfe6885aac8e07aad460a3ee22c8affd9b255d72 If a buffer exceeds UINT_MAX (which is only possible on 64 bit systems) an endless loop or OOB write can occur in buffer-specific readline functions. Switching variables in function scope to size_t solves these issue because relevant fields in struct buffer are already size_t. ok cheloha, deraadt, nicm, tedu Use recallocarray() to avoid leaving detritus in memory when resizing 2017-03-18T01:48:43Z deraadt deraadt@openbsd.org 2017-03-18T01:48:43Z urn:sha1:7f665dca4265d5266bd3d438459c2ba5c2c07b33 the string buffer. ok jsing millert Remove NULL pointer checks before calls to free(). 2016-09-03T11:31:17Z nayden nayden@openbsd.org 2016-09-03T11:31:17Z urn:sha1:8698d772fa8e7a9c21b357c7c0f44e0b4c3e93ec OK bluhm@ nicm@ Include stdint.h, not limits.h to get SIZE_MAX. OK guenther@ 2015-02-05T12:59:57Z millert millert@openbsd.org 2015-02-05T12:59:57Z urn:sha1:1357284a52eeaab13e37b2fa04ef8c1009e91b87 Fix CVE-2014-6272 in Libevent 1.4 from upstream: 2015-01-05T23:14:36Z bluhm bluhm@openbsd.org 2015-01-05T23:14:36Z urn:sha1:30030996ead37cfee5b2516b01bfef7da7de6975 - https://github.com/libevent/libevent/commit/7b21c4eabf1f3946d3f63cce1319c490caab8ecf - For this fix, we need to make sure that passing too-large inputs to the evbuffer functions can't make us do bad things with the heap. On top of that do: - Update libevent version to 1.4.15-stable. - Use SIZE_MAX from limits.h instead of a private define. - Do not declare 'size_t need' twice to avoid a compiler warning. OK sthen libraries shouldnt print to stderr when things dont go their way. 2014-11-21T07:44:25Z dlg dlg@openbsd.org 2014-11-21T07:44:25Z urn:sha1:2af84a8cb19ebc3b37d08483a4563db54f293381 switch fprintf(stderr) over to event_warn() on malloc failure. fix up an errant newline in an existing event_warn while there. originally i just wanted to delete the fprintf diff from nicm@ who is away from a keyboard right now so cant commit guenther@ agrees with the idea Fix whitespace errors in libevent. 2014-10-30T16:45:37Z bluhm bluhm@openbsd.org 2014-10-30T16:45:37Z urn:sha1:824b820d4681cb871673244f671f855c64a3db5f OK nicm@ After removing all the #ifdef, the wrappers in evutil are rather 2014-10-29T22:47:29Z bluhm bluhm@openbsd.org 2014-10-29T22:47:29Z urn:sha1:84ea67e3e3c0f239bd94fd21b75b8140c2dd446b useless. Let libevent call the libc functions directly. OK nicm@ Remove some #ifdef from libevent. 2014-10-18T21:56:44Z bluhm bluhm@openbsd.org 2014-10-18T21:56:44Z urn:sha1:37fbd8dfb5cf1486c8318998b0f7facda94557da OK nicm@ Remove the remaining #ifdef HAVE_ and the #define _GNU_SOURCE. 2014-10-18T16:48:28Z bluhm bluhm@openbsd.org 2014-10-18T16:48:28Z urn:sha1:44e30b10372d07959035c45ba62dee4130f51c99 OK nicm@