Michael Brown 2b4be69eee [libc] Prevent strndup() from reading beyond the end of the string ...

strndup() may be called on a string which is not NUL-terminated.  Use
strnlen() instead of strlen() to ensure that we do not read beyond the
end of such a string.

Add self-tests for strndup(), including a test case with an
unterminated string.

Originally-fixed-by: Marin Hannache <git@mareo.fr>
Signed-off-by: Michael Brown <mcb30@ipxe.org>

2014-05-18 21:09:49 +01:00

..

acpi.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

ansicol.c

[console] Add centralised concept of colours and colour pairs

2013-12-09 15:34:07 +00:00

ansicoldef.c

[console] Add concept of a "magic" colour

2013-12-09 15:34:14 +00:00

ansiesc.c

[console] Allow '?' as an intermediate byte in ANSI escape sequences

2013-12-02 17:20:36 +00:00

asprintf.c

[legal] Add a selection of FILE_LICENCE declarations

2009-05-18 08:33:25 +01:00

assert.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

base16.c

[base16] Fix comparison of signed and unsigned integers

2013-11-14 12:35:43 +00:00

base64.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

basename.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

bitmap.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

blockdev.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

console.c

[console] Allow consoles to update the recorded console size

2013-12-06 17:47:54 +00:00

cpio.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

ctype.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

cwuri.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

debug_md5.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

debug.c

[libc] Add isprint()

2014-01-06 01:46:20 +01:00

device.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

downloader.c

[downloader] Profile receive datapath

2014-04-28 12:31:39 +01:00

edd.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

errno.c

[legal] Add FILE_LICENCE for core/errno.c

2013-07-14 23:40:25 +02:00

exec.c

[cmdline] Generate command option help text automatically

2013-11-07 17:00:51 +00:00

fbcon.c

[fbcon] Allow ANSI CUP with missing arguments

2014-01-22 22:43:55 +00:00

fnrec.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

gdbserial.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

gdbstub.c

[librm] Allow interrupts in protected mode

2014-04-29 18:24:04 +01:00

gdbudp.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

getkey.c

[console] Sleep while waiting for user input

2012-07-24 09:56:36 +01:00

getopt.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

hw.c

[hw] Eliminate polling while waiting for window to open

2011-06-28 14:45:11 +01:00

i82365.c

Initial revision

2005-03-08 18:53:11 +00:00

image.c

[image] Add image_pixbuf() to create pixel buffer from image

2013-11-27 11:27:50 +00:00

init.c

[console] Add concept of generic console configuration

2013-11-28 05:55:43 +00:00

interface.c

[interface] Default to calling intf_restart() in response to intf_close()

2013-11-01 16:17:28 +00:00

iobuf.c

[tls] Concatenate received non-data records before processing

2013-01-31 09:59:36 +00:00

isqrt.c

[libc] Add isqrt() function to find integer square roots

2014-04-26 18:19:49 +01:00

job.c

[job] Allow job_progress() to return an ongoing job status code, if known

2013-11-01 16:17:28 +00:00

linebuf.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

lineconsole.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

list.c

[list] Reduce overall code size by externalising many list functions

2012-11-02 16:21:06 +00:00

log.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

main.c

[main] Defer "initialising devices" message until initialising devices

2013-11-27 11:27:50 +00:00

malloc.c

[malloc] Allow allocation of memory with a specified alignment offset

2012-08-31 21:22:45 +01:00

memblock.c

[umalloc] Split largest_memblock() function out from init_eheap()

2012-11-06 17:44:40 +00:00

memmap_settings.c

[settings] Force settings into alphabetical order within sections

2013-12-05 12:43:28 +00:00

menu.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

misc.c

[base16] Generalise base16_decode() to hex_decode()

2013-07-12 15:14:36 +02:00

monojob.c

[monojob] Reset timeout when progress is made

2014-03-10 13:16:18 +00:00

null_nap.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

null_reboot.c

[cmdline] Add "poweroff" command

2013-07-15 13:49:48 +02:00

null_sanboot.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

null_time.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

nvo.c

[settings] Explicitly separate the concept of a completed fetched setting

2013-12-05 00:37:02 +00:00

open.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

params.c

[params] Use reference counters for form parameter lists

2014-02-26 23:34:07 +00:00

parseopt.c

[cmdline] Generate command option help text automatically

2013-11-07 17:00:51 +00:00

pc_kbd.c

[console] Move include/console.h to include/ipxe/console.h

2011-03-09 20:09:26 +00:00

pcmcia.c

[console] Move putchar() and getchar() declarations to stdio.h

2012-03-26 14:43:52 +01:00

pending.c

[cmdline] Rewrite "sync" command to use monojob_wait()

2013-11-01 17:00:16 +00:00

pinger.c

[ping] Add generic ping mechanism

2013-10-21 15:08:18 +01:00

pixbuf.c

[pixbuf] Add generic concept of a pixel buffer

2013-11-27 11:27:50 +00:00

posix_io.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

process.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

profile.c

[profile] Allow interrupts to be excluded from profiling results

2014-05-04 13:39:42 +01:00

random.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

refcnt.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

resolv.c

[resolv] Use sock_aton() to allow parsing of arbitrary numeric addresses

2013-10-21 14:34:13 +01:00

serial_console.c

[console] Allow console input and output to be disabled independently

2013-11-28 05:54:53 +00:00

serial.c

[serial] Enable UART FIFOs

2014-04-22 13:59:21 +01:00

settings.c

[settings] Remove "uristring" setting type

2014-02-26 23:34:07 +00:00

string.c

[libc] Prevent strndup() from reading beyond the end of the string

2014-05-18 21:09:49 +01:00

stringextra.c

[legal] Add FILE_LICENCE macro to some GPL-v2 files

2010-12-03 23:23:35 +00:00

strtoull.c

[libc] Allow strtoul() to interpret negative numbers

2012-04-17 10:42:08 +01:00

time.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

timer.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

uri.c

[uri] Refactor URI parsing and formatting

2014-02-27 13:32:53 +00:00

uuid.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

version.c

[build] Include version number within only a single object file

2012-11-02 14:46:39 +00:00

vsprintf.c

[console] Fix display of characters with top bit set

2014-03-13 14:21:59 +00:00

wchar.c

[libc] Add wcslen() function

2012-10-15 18:32:16 +01:00

xfer.c

[legal] Update FSF mailing address in GPL licence texts

2012-07-20 19:55:45 +01:00

xferbuf.c

[xferbuf] Add generic data-transfer buffer

2012-05-08 19:16:46 +01:00