November 2, 2017
View c8f8f9f

Merge branch 'master' of git.vrt.sourcefire.com:clamav/clamav-devel

Steven Morgan authored on 2017/11/02 05:23:34
View 0604618

bb11944 - fix possible message.c OOB read.

Steven Morgan authored on 2017/11/02 05:23:23
November 1, 2017
View 40451e2

Reverting change that supported empty string filenames for cab files.

Micah Snyder authored on 2017/11/01 00:28:43
October 31, 2017
View c8ba4ae

11942 - fixing heap overflow in handle_pdfname. Patch submitted by Suleman Ali.

Mickey Sola authored on 2017/10/31 06:33:19
View f75c04b

bb11941 - fixing UAF in mbox exportBounceMessage. Original patch submitted by Suleman Ali

Mickey Sola authored on 2017/10/31 05:39:54
October 30, 2017
View 7cf2a70

b11939: adding fix as recommended by bug reporter along with a couple extra lines to ensure freed pointers are set to NULL.

Micah Snyder authored on 2017/10/30 06:35:00
October 28, 2017
View d1100be

bb11940 - fixing heap overflow in rfc2037. Patch submitted by Suleman Ali

Mickey Sola authored on 2017/10/28 06:24:33
View 39c89d1

bb11945 - fixing null dereference of blob pointer

Mickey Sola authored on 2017/10/28 06:04:32
View 38da480

bb11943 - add check to mew.c for out of bounds read. Patch supplied by Suleman Ali.

Steven Morgan authored on 2017/10/28 05:52:29
View 292d687

bb11946 - check that tar checksum is within bounds. Patch supplied by Suleman Ali.

Steven Morgan authored on 2017/10/28 05:03:29
October 26, 2017
View 7732667

Adding missing -1 that enables trimming of trailing spaces in mbox parsing code.

Micah Snyder authored on 2017/10/26 03:37:14
October 25, 2017
View ad905e5

forgot to remove a few stats submission related option checking in clamd

Micah Snyder authored on 2017/10/25 05:35:26
View 22880de

eliminating additional option references to stat collection and submission until such time as a new stats website and associated clamav code is ready.

Micah Snyder authored on 2017/10/25 02:38:37
October 24, 2017
View eaa7115

1) improved debug messages 2) accept files in the cab with 0-byte (just a null terminator) lengths. I don’t know that there are any real cabs that have this, but it’s conceivable. 3) only try to sanitize if we actually got the filename correctly (I forgot to put an else{} around it when I added filename sanitization). 4) reset the parsing offset to the beginning of the file entries in case the # of folder entries found did not match the # stated in the header. (This could help or hurt in a malformed cab header depending on exactly how it was malformed. Actual value gained… hard to say).

Micah Snyder authored on 2017/10/24 22:33:54
October 19, 2017
View dc30ba7

bb11910 - remove DetectionStatsHostID.

Steven Morgan authored on 2017/10/19 05:46:58