1. 07 Jun, 2019 2 commits
  2. 03 Jun, 2019 2 commits
  3. 30 May, 2019 2 commits
  4. 29 May, 2019 2 commits
    • Tomas Krizek's avatar
      Merge branch 'p/uv_write-lifetime' into 'master' · fd15bc6c
      Tomas Krizek authored
      daemon TCP to upstream: don't send wrong message length
      
      See merge request !816
      fd15bc6c
    • Vladimír Čunát's avatar
      daemon TCP to upstream: don't send wrong message length · 10a113d7
      Vladimír Čunát authored
      See the added comments.  Such bugs are tricky, because the old code
      would typically work just fine, only if libuv/OS decided to postpone
      copying the data (perhaps large load), we would send two bytes from
      this address on C stack - their later value (hard to predict what).
      
      Security risks: the two bytes might theoretically contain information
      that was more or less private and we just send it to some DNS server
      (possibly over unencrypted TCP), but ATM I find it very unlikely that
      this bug could be practically exploited.
      10a113d7
  5. 28 May, 2019 3 commits
  6. 24 May, 2019 3 commits
  7. 22 May, 2019 2 commits
  8. 06 May, 2019 1 commit
  9. 29 Apr, 2019 2 commits
  10. 26 Apr, 2019 5 commits
  11. 25 Apr, 2019 3 commits
  12. 23 Apr, 2019 1 commit
  13. 18 Apr, 2019 12 commits