diff options
| author | B. Stack <bgstack15@gmail.com> | 2022-05-22 21:09:26 +0000 |
|---|---|---|
| committer | B. Stack <bgstack15@gmail.com> | 2022-05-22 21:09:26 +0000 |
| commit | 54c2e44d7b37b2c3efc449e054eef21fa414dfde (patch) | |
| tree | 3894ba7e10c78750c195381a861da5e8166a6bfd /Bugs.txt | |
| parent | Merge branch 'b11.20' into 'master' (diff) | |
| parent | add upstream 11.21 (diff) | |
| download | FreeFileSync-54c2e44d7b37b2c3efc449e054eef21fa414dfde.tar.gz FreeFileSync-54c2e44d7b37b2c3efc449e054eef21fa414dfde.tar.bz2 FreeFileSync-54c2e44d7b37b2c3efc449e054eef21fa414dfde.zip | |
Merge branch 'b11.21' into 'master'11.21
add upstream 11.21
See merge request opensource-tracking/FreeFileSync!44
Diffstat (limited to 'Bugs.txt')
| -rw-r--r-- | Bugs.txt | 15 |
1 files changed, 14 insertions, 1 deletions
@@ -5,7 +5,7 @@ the ones mentioned below. The remaining issues that are yet to be fixed are list ---------------- -| libcurl 7.74 | +| libcurl 7.83| ---------------- __________________________________________________________________________________________________________ /lib/ftp.c @@ -62,6 +62,19 @@ move the following constants from src/sftp.h to include/libssh2_sftp.h: #define MAX_SFTP_READ_SIZE 30000 __________________________________________________________________________________________________________ +src/userauth.c +buffer overflow: https://github.com/libssh2/libssh2/pull/693 + +-if (banner_len >= session->userauth_list_data_len - 5) { ++if (banner_len > session->userauth_list_data_len - 5) { + +-session->userauth_banner = LIBSSH2_ALLOC(session, banner_len); ++session->userauth_banner = LIBSSH2_ALLOC(session, banner_len + 1); + +-memmove(session->userauth_banner, session->userauth_list_data + 5, ++memcpy(session->userauth_banner, session->userauth_list_data + 5, + +__________________________________________________________________________________________________________ ------------------- |