Commit Graph

531 Commits

Author SHA1 Message Date
Tatsuya Kinoshita 52e9fc6b44 Update ChangeLog 2016-12-09 00:41:23 +09:00
Tatsuya Kinoshita 9ccaa1dd0d Prevent overflow beyond the end of string in form_update_line()
Bug-Debian: https://github.com/tats/w3m/issues/75
2016-12-09 00:41:19 +09:00
Tatsuya Kinoshita e757b43bcf Prevent overflow beyond the end of string in skip_space()
Bug-Debian: https://github.com/tats/w3m/issues/74
2016-12-08 23:51:09 +09:00
Tatsuya Kinoshita a932f78a6d Prevent overflow beyond the end of string in visible_length()
Bug-Debian: https://github.com/tats/w3m/issues/73
2016-12-08 23:46:30 +09:00
Tatsuya Kinoshita a56a8ef132 Prevent overflow beyond the end of string in wtf_strwidth()
Bug-Debian: https://github.com/tats/w3m/issues/57
2016-12-08 01:00:42 +09:00
Tatsuya Kinoshita 295b1ef8f8 Revert "Prevent overflow beyond the end of string in wtf_strwidth()"
This reverts commit d345c0950d.
2016-12-08 00:54:42 +09:00
Tatsuya Kinoshita 37d9041510 Update ChangeLog 2016-12-07 22:13:42 +09:00
Tatsuya Kinoshita 26484fc138 Prevent heap-use-after-free in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/65
2016-12-07 22:09:06 +09:00
Tatsuya Kinoshita ecf5771419 Prevent negative values for offset and pos in push_link()
Bug-Debian: https://github.com/tats/w3m/issues/64
2016-12-07 21:57:37 +09:00
Tatsuya Kinoshita 512ed467d1 Prevent overflow beyond the end of string in proc_mchar()
Bug-Debian: https://github.com/tats/w3m/issues/59
2016-12-07 21:24:44 +09:00
Tatsuya Kinoshita d345c0950d Prevent overflow beyond the end of string in wtf_strwidth()
Bug-Debian: https://github.com/tats/w3m/issues/57
2016-12-07 21:19:28 +09:00
Tatsuya Kinoshita 900553de6d Update ChangeLog 2016-12-05 22:45:15 +09:00
Yixun Lan edf86c5781 Explictily include <time.h> to avoid build err
while disable ssl, we will got a undefine time_t err

see https://bugs.gentoo.org/show_bug.cgi?id=601498

Signed-off-by: Yixun Lan <dlan@gentoo.org>
2016-12-05 22:41:17 +09:00
Tatsuya Kinoshita 30b0c97167 Prevent array index out of bounds for tridvalue in feed_table_tag()
Bug-Debian: https://github.com/tats/w3m/issues/71
2016-12-05 22:36:58 +09:00
Tatsuya Kinoshita a3ed914b0c Prevent negative array index in set_integered_width()
Bug-Debian: https://github.com/tats/w3m/issues/70
2016-12-05 22:25:14 +09:00
Tatsuya Kinoshita a6ddc331e9 Prevent array index out of bounds for tabattr in feed_table_tag()
Bug-Debian: https://github.com/tats/w3m/issues/60
2016-12-05 22:05:07 +09:00
Tatsuya Kinoshita d7f55d5959 Prevent negative array index in process_textarea()
Bug-Debian: https://github.com/tats/w3m/issues/58
2016-12-05 21:48:30 +09:00
Tatsuya Kinoshita f34c37f315 Prevent negative array index for marks in HTMLlineproc2body()
Bug-Debian: https://github.com/tats/w3m/issues/61
2016-12-05 21:48:20 +09:00
Tatsuya Kinoshita 0e66622582 Prevent negative value of row for pushTable() in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/67
2016-12-05 21:48:20 +09:00
Tatsuya Kinoshita 6c6a2cbced Prevent negative array index in getMetaRefreshParam()
Bug-Debian: https://github.com/tats/w3m/issues/63
2016-12-05 21:48:08 +09:00
Tatsuya Kinoshita d57c13282a Prevent negative array index for marks in shiftAnchorPosition()
Bug-Debian: https://github.com/tats/w3m/issues/62
2016-12-05 21:44:17 +09:00
Tatsuya Kinoshita 13cca01a6f Update ChangeLog 2016-11-27 17:12:13 +09:00
Tatsuya Kinoshita 476e68f299 Merge pull request #50 from kcwu/fix-uninit-process_img
fix uninitialized variable in process_img(). fix #44
2016-11-27 17:08:47 +09:00
Tatsuya Kinoshita 4da2745dc8 Merge pull request #49 from kcwu/fix-menu-overflow
fix menu buffer-overflow
2016-11-27 17:08:02 +09:00
Tatsuya Kinoshita 8d31b4bab3 Add CVE IDs
cf. https://security-tracker.debian.org/tracker/source-package/w3m
    http://www.openwall.com/lists/oss-security/2016/11/24/1
2016-11-27 16:53:15 +09:00
Kuang-che Wu 41a607b06e fix uninitialized variable in process_img(). fix #44 2016-11-27 15:33:34 +08:00
Kuang-che Wu 7e1c05dd90 fix menu buffer-overflow 2016-11-27 15:24:34 +08:00
Tatsuya Kinoshita 6519207d0b Update ChangeLog 2016-11-20 19:32:05 +09:00
Tatsuya Kinoshita c94a28011f Update NEWS 2016-11-20 19:30:18 +09:00
Tatsuya Kinoshita 2d1b5ecddc Update ChangeLog 2016-11-19 15:46:53 +09:00
Tatsuya Kinoshita fdfab25608 Update NEWS 2016-11-19 15:41:22 +09:00
Tatsuya Kinoshita 251e191754 Update ChangeLog 2016-11-18 23:31:00 +09:00
Tatsuya Kinoshita 5fb44be9a6 Add CVE IDs
cf. https://security-tracker.debian.org/tracker/source-package/w3m
    http://seclists.org/oss-sec/2016/q4/452
2016-11-18 23:29:47 +09:00
Tatsuya Kinoshita 88110c2658 Fix type mismatch for pcsw_ucs_map_size
cf. https://github.com/tats/w3m/issues/43
2016-11-18 23:25:04 +09:00
Tatsuya Kinoshita 5a7dfaddc4 Update ChangeLog 2016-11-18 22:31:41 +09:00
Tatsuya Kinoshita 716bc12663 Prevent global-buffer-overflow in wc_any_to_ucs()
Bug-Debian: https://github.com/tats/w3m/issues/43
2016-11-18 22:30:19 +09:00
Tatsuya Kinoshita 8f4f57658c Update ChangeLog 2016-11-17 20:28:19 +09:00
Tatsuya Kinoshita ba9d78faeb Prevent global-buffer-overflow in parseURL()
Bug-Debian: https://github.com/tats/w3m/issues/41
2016-11-17 20:19:55 +09:00
Tatsuya Kinoshita ecfdcbe113 Prevent deref null pointer in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/42
2016-11-17 19:33:09 +09:00
Tatsuya Kinoshita 81a2932829 Update ChangeLog 2016-11-16 00:08:24 +09:00
Tatsuya Kinoshita ec99f18638 Prevent deref null pointer in renderCoTable()
Bug-Debian: https://github.com/tats/w3m/issues/20#issuecomment-260649537
2016-11-15 23:59:57 +09:00
Tatsuya Kinoshita 08285d6a18 Update ChangeLog 2016-11-15 20:19:38 +09:00
Tatsuya Kinoshita 2a4a2fb9f1 Prevent infinite recursion with nested table and textarea
Bug-Debian: https://github.com/tats/w3m/issues/20#issuecomment-260590257
2016-11-15 20:11:52 +09:00
Tatsuya Kinoshita 61e50c5faf Revert "Prevent infinite recursion with nested table and textarea"
This reverts commit f393faf559.
2016-11-15 19:52:27 +09:00
Tatsuya Kinoshita a088e0263c Prevent deref null pointer in shiftAnchorPosition()
Bug-Debian: https://github.com/tats/w3m/issues/40
2016-11-15 19:40:28 +09:00
Tatsuya Kinoshita 06caca13dd Update ChangeLog 2016-11-14 21:27:24 +09:00
Tatsuya Kinoshita 9db438094e Prevent null pointer deref due to bad form id
Bug-Debian: https://github.com/tats/w3m/issues/39
2016-11-14 21:22:13 +09:00
Tatsuya Kinoshita 0c3f5d0e0d Prevent array index out of bounds for symbol
Bug-Debian: https://github.com/tats/w3m/issues/38
2016-11-14 21:20:44 +09:00
Tatsuya Kinoshita 5b932eb715 Update ChangeLog 2016-11-13 17:38:22 +09:00
Tatsuya Kinoshita a59a35211c Prevent null pointer dereference in HTMLlineproc2body for textarea_int
Bug-Debian: https://github.com/tats/w3m/issues/32#issuecomment-260170163
2016-11-13 17:33:53 +09:00