Commits
rel/0.100
Name already in use
Commits on Mar 13, 2019
-
Incremented version numbers and functionality level for 0.100.3 patch…
… release. Added release notes to NEWS.md
-
Correction to cli_vba_scandir to account for change from 0-indexed to…
… 1-indexed hash counts, and to remove extraneous hashcnt--, an oversite from the commit fixing fuzz - 12166.
-
-
-
fuzz - 12166 - Fix for 4-byte out of bounds write wherein the an inva…
…lid struct pointer member variable is set to zero. The fix adds bounds checking to the Uniq storage 'add' function as well as error code checks. Included a lot of new inline documentation.
-
Commits on Oct 2, 2018
-
-
-
-
-
Fix off-by-one bounds check on CHM PMGI/PMGL chunk numbers and reject…
… empty filenames. Thanks to Hanno Böck for reporting
-
Revert "bb12107 - 100.1 - fixing oob heap read in mspack"
This reverts commit 867177e. Reverting in order to apply the upstream libmspack version of the fix for the same bug.
-
Adjusted log verbosity for the OnAccessExtraScanning message to only …
…print if LogVerbose is enabled.
-
Replacing call to cli_strndup in freshclam with calloc and memcpy cal…
…ls, because cli_strndup is not a libclamav exported function and should not be available to freshclam, as observed in Windows builds.
-
Disabled OnAccessExtraScanning and provided a warning when starting c…
…lamd if it's enabled as well as a note in the sample clamd.conf.
-
Reduced ignore/blacklist time for mirrors to 6 hours (long-term) and …
…1 hour (short-term). Added lenience for updates when the downloaded DB version is 1 behind what was advertised by DNS. Added code to print unknown/unexpected HTTP response codes. Removed db.XY.clamav.net recommendation from freshclam.conf.sample.
Commits on Jul 6, 2018
-
-
Replacing strntol with strntoul to ensure proper (un)signedness when …
…parsing numbers from PDFs.
-
Adjustment to pdf find_obj logic to allow the parser to skip, continu…
…e when it finds objects that cannot be parsed and may not in fact be objects at all.
-
bb12133: Wrapping cli_strntol to provide easy error detection. Applyi…
…ng cli_strntol_wrap with error checking. Adding logic to identify when a parsing error is in fact a new revision of the PDF.
-
bb12133: Implementing cli_strntol based on gnu gcc's strtol implement…
…ation with modifications to limit string buffer length for non-null terminated strings. Using cli_strntol in pdf.c for added safety.
-
100.1 - rar - reverting and fixing issues found with changes found to…
… rar extraction during regression.
-
Adjusting HWP offset check to account for the possibility of a zero-c…
…ell or zero-line situation.
-
bb12122: improving bounds checking in a more intuitive way, and addin…
…g additional check that I missed earlier.
-
Patch from libxml2 upstream, 899a5d9f0ed13b8e32449a08a361e0de127dd961…
…. Detect infinite recursion in parameter entities. When expanding a parameter entity in a DTD, infinite recursion could lead to an infinite loop or memory exhaustion.
-
bb12059 - 100.1 - fixing potential buffer reads based on values from …
…unintialized vars when unpacking rar files
-