Michael Brown de2616165b [xfer] Avoid using stack-allocated memory in xfer_printf() ...

xfer_printf() occasionally has to deal with strings that are
potentially long, such as HTTP URIs with multiple query parameters.
Allocating these on the stack can lead to stack overruns and memory
corruption.

Fix by using vasprintf() instead of a stack allocation.

Signed-off-by: Michael Brown <mcb30@ipxe.org>

2012-04-23 20:30:48 +01:00

..

acpi.c

[block] Replace gPXE block-device API with an iPXE asynchronous interface

2010-09-14 20:37:15 +01:00

ansiesc.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

asprintf.c

[legal] Add a selection of FILE_LICENCE declarations

2009-05-18 08:33:25 +01:00

assert.c

[libc] Allow assertion failures to be counted

2011-10-14 14:33:31 +01:00

base16.c

[base16] Add generic base16 encoding and decoding routines

2010-05-28 15:41:37 +01:00

base64.c

[base64] Add ability to decode base64 strings

2010-05-28 12:47:10 +01:00

basename.c

[legal] Add a selection of FILE_LICENCE declarations

2009-05-18 08:33:25 +01:00

bitmap.c

[bitmap] Fix bitmaps on 64-bit

2010-05-27 01:18:17 +01:00

bitops.c

[legal] Add a selection of FILE_LICENCE declarations

2009-05-18 08:33:25 +01:00

blockdev.c

[block] Replace gPXE block-device API with an iPXE asynchronous interface

2010-09-14 20:37:15 +01:00

console.c

[console] Allow usage to be defined independently for each console

2012-03-26 17:40:01 +01:00

cpio.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

ctype.c

[script] Allow for DOS-style line endings in scripts

2009-06-03 10:13:29 +01:00

cwuri.c

[uri] Special case NULL in churi()

2010-04-25 17:25:30 +01:00

debug_md5.c

[debug] Add DBG_MD5() and related macros

2010-12-09 13:13:31 +00:00

debug.c

[console] Allow usage to be defined independently for each console

2012-03-26 17:40:01 +01:00

device.c

[init] Remove concept of "shutdown exit flags"

2011-01-27 20:40:26 +00:00

downloader.c

[downloader] Use a more meaningful error message when out of memory

2012-03-27 00:43:07 +01:00

edd.c

[int13] Add infrastructure to support EDD version 4.0

2010-09-22 17:09:56 +01:00

errno.c

Split strerror() out from errno.c

2006-12-20 03:49:36 +00:00

exec.c

[cmdline] Allow "sleep" command to be interrupted

2011-10-24 15:52:57 +01:00

fnrec.c

[fnrec] Enhance function recording

2010-12-09 13:11:27 +00:00

gdbserial.c

[legal] Add FILE_LICENCE macro to some GPL-v2-or-later files

2010-12-03 23:38:15 +00:00

gdbstub.c

[legal] Add FILE_LICENCE macro to some GPL-v2-or-later files

2010-12-03 23:38:15 +00:00

gdbudp.c

[legal] Add FILE_LICENCE macro to some GPL-v2-or-later files

2010-12-03 23:38:15 +00:00

getkey.c

[console] Move include/console.h to include/ipxe/console.h

2011-03-09 20:09:26 +00:00

getopt.c

[getopt] Accept "--" as an end-of-options marker

2011-11-02 00:23:57 +00:00

hw.c

[hw] Eliminate polling while waiting for window to open

2011-06-28 14:45:11 +01:00

i82365.c

Initial revision

2005-03-08 18:53:11 +00:00

image.c

[image] Fix use-after-free in debug messages

2012-03-30 20:50:25 +01:00

init.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

interface.c

[interface] Allow for non-pass-through interface methods

2010-06-22 19:12:40 +01:00

iobuf.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

job.c

[interface] Convert all job-control interfaces to generic interfaces

2010-06-22 14:40:09 +01:00

linebuf.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

lineconsole.c

[console] Do not share ANSI escape context between lineconsole users

2012-03-26 21:58:50 +01:00

log.c

[console] Add "log message" console usage and an internal syslog() call

2012-03-26 19:58:14 +01:00

main.c

[main] Add the "scriptlet" setting

2011-03-28 18:50:27 +01:00

malloc.c

[linux] Make malloc and linux_umalloc valgrindable

2011-03-27 21:03:05 +01:00

menu.c

[menu] Add the abstract concept of a menu

2012-03-29 13:44:48 +01:00

misc.c

[libc] Allow strtoul() to interpret negative numbers

2012-04-17 10:42:08 +01:00

monojob.c

[monojob] Avoid overflow when calculating percentage progress

2011-03-26 13:14:53 +00:00

null_nap.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

null_sanboot.c

[sanboot] Add "sanhook" and "sanunhook" commands

2011-04-24 16:44:34 +01:00

null_time.c

[time] Define an API for getting the current time

2012-03-19 22:13:27 +00:00

nvo.c

[settings] Formalise notion of setting applicability

2011-03-22 19:54:58 +00:00

open.c

[xfer] Expose xfer_uri_opener()

2011-01-27 18:46:07 +00:00

parseopt.c

[menu] Add menu commands

2012-03-29 14:02:02 +01:00

pc_kbd.c

[console] Move include/console.h to include/ipxe/console.h

2011-03-09 20:09:26 +00:00

pcmcia.c

[console] Move putchar() and getchar() declarations to stdio.h

2012-03-26 14:43:52 +01:00

posix_io.c

[xfer] Generalise metadata "whence" field to "flags" field

2010-09-03 21:21:14 +01:00

process.c

[process] Add support for one-shot processes

2011-06-28 14:45:09 +01:00

random.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

refcnt.c

[refcnt] Check reference validity on each use of ref_get() and ref_put()

2010-11-08 03:35:35 +00:00

resolv.c

[resolv] Use a one-shot process for the numeric resolver

2011-06-28 14:45:09 +01:00

serial_console.c

[console] Remove "log message" usage from interactive console defaults

2012-03-27 00:51:50 +01:00

serial.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

settings.c

[settings] Add fetch_setting_copy()

2012-04-19 16:10:07 +01:00

string.c

[legal] Add a selection of FILE_LICENCE declarations

2009-05-18 08:33:25 +01:00

stringextra.c

[legal] Add FILE_LICENCE macro to some GPL-v2 files

2010-12-03 23:23:35 +00:00

strtoull.c

[libc] Allow strtoul() to interpret negative numbers

2012-04-17 10:42:08 +01:00

time.c

[libc] Add mktime() function

2012-03-19 17:35:46 +00:00

timer.c

[legal] Add a selection of FILE_LICENCE declarations

2009-05-18 08:33:25 +01:00

uri.c

[uri] Fix NULL dereference in parse_uri()

2010-04-25 17:21:49 +01:00

uuid.c

[settings] Split fetching and storing out of setting type handlers

2012-04-17 10:46:50 +01:00

vsprintf.c

[console] Move putchar() and getchar() declarations to stdio.h

2012-03-26 14:43:52 +01:00

xfer.c

[xfer] Avoid using stack-allocated memory in xfer_printf()

2012-04-23 20:30:48 +01:00