Skip to content
Snippets Groups Projects
  1. Dec 16, 2016
    • Richard van der Hoff's avatar
      Avoid buffer overrun on encryption · 8e554ab5
      Richard van der Hoff authored
      Make sure we null-terminate encrypted strings before passing them to
      UTF8ToString.
      
      This used to work when we allocated the buffer on the stack, because it turns
      out that allocate() zeroinits the returned memory. malloc(), of course, does
      not.
      8e554ab5
  2. Dec 15, 2016
  3. Dec 14, 2016
  4. Sep 06, 2016
  5. Sep 05, 2016
  6. Sep 04, 2016
    • Richard van der Hoff's avatar
      Fix megolm decryption of UTF-8 · 1d4c13c7
      Richard van der Hoff authored
      Repeat the fix from b10f90d for megolm messages.
      
      It turns out that the 'length' argument to 'Pointer_stringify' doesn't work if
      the input includes characters >= 128.
      
      Rather than try to figure out which methods can return UTF-8, and which always
      return plain ascii, replace all uses of Pointer_stringify with a 'length'
      argument with the version that expects a NULL-terminated input, and extend the
      buffer by a byte to allow space for a null-terminator.
      
      In the case of decrypt, we need to add the null ourself.
      
      Fixes https://github.com/vector-im/vector-web/issues/2078.
      1d4c13c7
  7. May 25, 2016
Loading