1. 21 May, 2019 13 commits
  2. 20 May, 2019 2 commits
  3. 17 May, 2019 4 commits
  4. 16 May, 2019 2 commits
  5. 15 May, 2019 6 commits
  6. 14 May, 2019 1 commit
    • Dridi Boukelmoune's avatar
      Kill strcat and strcpy usage in VIN_n_Arg · 3a1fd9bb
      Dridi Boukelmoune authored
      If an absolute path is provided as n_arg with a length of exactly
      PATH_MAX-1 then the combination of strcpy and strcat for the trailing
      slash '/' overflows dn by one byte, writing its new null-terminating
      character '\0' right after dn's upper bound.
      
      By using a fixed-length VSB we can simply ensure that we stay within
      bounds at a reasonable cost. Guarding VSB operations should silence
      Flexelint as a nice side effect.
      
      VIN_n_Arg is not exposed outside of the source tree, and both callers
      today provide a valid dir argument, so we can now make it part of the
      contract with an assertion, simplifying the strdup error handling.
      3a1fd9bb
  7. 13 May, 2019 5 commits
  8. 12 May, 2019 1 commit
  9. 09 May, 2019 5 commits
  10. 08 May, 2019 1 commit