libqb/lib
Ferenc Wágner 4aa460891e Make it impossible to truncate or overflow the connection description
It's hard to predict the length of formatted output, so we'd better
notice (and abort) if the description is truncated.  Incidentally,
mkdtemp() does this for us in the shared memory branch, but do an
explicit check there as well for consistency, and get rid of the wrongly
parametrized strncat() risking a buffer overflow (CONNECTION_DESCRIPTION
is not the length of the source "/qb").

Similar truncation checks should be added to qb_ipcs_{shm,us}_connect()
where they build the request/response names, and possibly to other
places using snprintf().
2019-04-23 14:02:56 +01:00
..
.gitignore Cleanup the .gitignore files 2012-05-09 21:43:58 +10:00
array.c warnings cleanup: Wsign-compare: array: int32_t -> size_t 2017-12-20 22:18:06 +01:00
atomic_int.h Add internal support for the new __atomic gcc builtins 2013-05-13 10:15:55 +10:00
hashtable.c Add the processing which remove notifier at skiplist_destroy function 2013-01-15 01:57:29 +09:00
hdb.c warnings cleanup: Wsign-compare: hdb: uint32_t <-> int32_t 2017-12-20 22:19:17 +01:00
ipc_int.h ipc: Use mkdtemp for more secure IPC files 2019-04-09 10:56:51 +01:00
ipc_setup.c Make it impossible to truncate or overflow the connection description 2019-04-23 14:02:56 +01:00
ipc_shm.c ipc: Use mkdtemp for more secure IPC files 2019-04-09 10:56:51 +01:00
ipc_socket.c ipc: Use mkdtemp for more secure IPC files 2019-04-09 10:56:51 +01:00
ipcc.c Doc tweaking (#261) 2017-07-20 15:21:51 +01:00
ipcs.c ipc: Use mkdtemp for more secure IPC files 2019-04-09 10:56:51 +01:00
libqb.pc.in High: bare fix for libqb logging not working with ld.bfd/binutils 2.29+ 2017-12-12 23:23:35 +01:00
log_blackbox.c warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate 2017-12-21 01:50:15 +01:00
log_dcs.c LOG: copy the function/filename for dynamic callsites 2013-03-20 17:10:35 +11:00
log_file.c log: use fdatasync instead of fsync where possible (#263) 2017-08-07 10:52:02 +01:00
log_format.c warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate 2017-12-21 01:50:15 +01:00
log_int.h Feature: Implement "extended" logging using a marker character 2015-04-30 12:14:53 -04:00
log_syslog.c Get coverity to ignore this warning. 2012-02-03 14:42:25 +11:00
log_thread.c Refactor: log_thread: fix and diminish inferior comments 2016-10-21 09:42:48 +02:00
log.c warnings cleanup: fix initialiser warning on RHEL7 2017-12-21 08:56:45 +00:00
loop_int.h LOOP: make it possible to pass in NULL as the default loop instance 2012-02-10 14:47:49 +11:00
loop_job.c Unify the list processing with qb_list function 2013-01-09 02:04:20 +09:00
loop_poll_epoll.c maint: replace 0xffffffff constants with UNIT32_MAX 2017-12-20 22:17:07 +01:00
loop_poll_int.h POLL: seperate out the poll/epoll and add kqueue 2012-04-04 00:26:20 +10:00
loop_poll_kqueue.c The udata member of the kevent struct is a void * 2015-01-23 01:58:02 +01:00
loop_poll_poll.c POLL: seperate out the poll/epoll and add kqueue 2012-04-04 00:26:20 +10:00
loop_poll.c maint: replace 0xffffffff constants with UNIT32_MAX 2017-12-20 22:17:07 +01:00
loop_timerlist.c warnings cleanup: hdb+loop_timerlist: Wsign-compare: (canary?) variables 2017-12-20 22:17:29 +01:00
loop.c Low: loop: don't bring runtime down for a trivial API misuse 2017-06-06 14:04:46 +01:00
Makefile.am version: update version-info for 1.0.4 release 2019-04-12 09:29:06 +01:00
map_int.h PTRIE: refcount the notifier structs 2012-01-25 16:09:32 +11:00
map.c MAP: add a notifier purely to allow the user to free memory. 2011-12-14 00:26:01 +11:00
qblog_script_noop.ld High: bare fix for libqb logging not working with ld.bfd/binutils 2.29+ 2017-12-12 23:23:35 +01:00
qblog_script.la.in High: bare fix for libqb logging not working with ld.bfd/binutils 2.29+ 2017-12-12 23:23:35 +01:00
qblog_script.ld.in High: bare fix for libqb logging not working with ld.bfd/binutils 2.29+ 2017-12-12 23:23:35 +01:00
ringbuffer_helper.c Med: rb: use new qb_rb_close_helper able to resort to file truncating 2016-11-04 19:05:35 +01:00
ringbuffer_int.h Med: rb: use new qb_rb_close_helper able to resort to file truncating 2016-11-04 19:05:35 +01:00
ringbuffer.c ipc: Use mkdtemp for more secure IPC files 2019-04-09 10:56:51 +01:00
rpl_sem.c rpl_sem: make destroy more compliant 2013-02-19 12:40:06 +11:00
rpl_sem.h rpl_sem: make destroy more compliant 2013-02-19 12:40:06 +11:00
skiplist.c Add the processing which remove notifier at skiplist_destroy function 2013-01-15 01:57:29 +09:00
strchrnul.c Use safer versions of string functions (strcpy -> strlcpy) 2012-02-08 22:00:49 +11:00
strlcat.c Fix strlcpy and strlcat functions 2012-12-19 10:42:08 +11:00
strlcpy.c Fix strlcpy and strlcat functions 2012-12-19 10:42:08 +11:00
trie.c warnings cleanup: Wformat: sign-correct PRIu32 specifiers as appropriate 2017-12-21 01:50:15 +01:00
unix.c ipc: Use mkdtemp for more secure IPC files 2019-04-09 10:56:51 +01:00
util_int.h Fix typos: in{ -> s}tance, d{e -> i}stinguished 2017-06-06 14:04:46 +01:00
util.c Low: fix internal object symbol's leak & expose run-time lib version 2017-12-12 23:23:46 +01:00