1. 05 Jun, 2019 2 commits
  2. 04 Jun, 2019 11 commits
  3. 03 Jun, 2019 2 commits
  4. 30 May, 2019 2 commits
  5. 29 May, 2019 2 commits
    • Tomas Krizek's avatar
      Merge branch 'p/uv_write-lifetime' into 'master' · fd15bc6c
      Tomas Krizek authored
      daemon TCP to upstream: don't send wrong message length
      
      See merge request knot/knot-resolver!816
      fd15bc6c
    • Vladimír Čunát's avatar
      daemon TCP to upstream: don't send wrong message length · 10a113d7
      Vladimír Čunát authored
      See the added comments.  Such bugs are tricky, because the old code
      would typically work just fine, only if libuv/OS decided to postpone
      copying the data (perhaps large load), we would send two bytes from
      this address on C stack - their later value (hard to predict what).
      
      Security risks: the two bytes might theoretically contain information
      that was more or less private and we just send it to some DNS server
      (possibly over unencrypted TCP), but ATM I find it very unlikely that
      this bug could be practically exploited.
      10a113d7
  6. 28 May, 2019 3 commits
  7. 24 May, 2019 3 commits
  8. 22 May, 2019 2 commits
  9. 06 May, 2019 1 commit
  10. 29 Apr, 2019 2 commits
  11. 26 Apr, 2019 5 commits
  12. 25 Apr, 2019 3 commits
  13. 23 Apr, 2019 1 commit
  14. 18 Apr, 2019 1 commit