Commit Graph

2006 Commits

Author SHA1 Message Date
Tatsuya Kinoshita
512ed467d1 Prevent overflow beyond the end of string in proc_mchar()
Bug-Debian: https://github.com/tats/w3m/issues/59
2016-12-07 21:24:44 +09:00
Tatsuya Kinoshita
d345c0950d Prevent overflow beyond the end of string in wtf_strwidth()
Bug-Debian: https://github.com/tats/w3m/issues/57
2016-12-07 21:19:28 +09:00
Tatsuya Kinoshita
900553de6d Update ChangeLog 2016-12-05 22:45:15 +09:00
Yixun Lan
edf86c5781 Explictily include <time.h> to avoid build err
while disable ssl, we will got a undefine time_t err

see https://bugs.gentoo.org/show_bug.cgi?id=601498

Signed-off-by: Yixun Lan <dlan@gentoo.org>
2016-12-05 22:41:17 +09:00
Tatsuya Kinoshita
30b0c97167 Prevent array index out of bounds for tridvalue in feed_table_tag()
Bug-Debian: https://github.com/tats/w3m/issues/71
2016-12-05 22:36:58 +09:00
Tatsuya Kinoshita
a3ed914b0c Prevent negative array index in set_integered_width()
Bug-Debian: https://github.com/tats/w3m/issues/70
2016-12-05 22:25:14 +09:00
Tatsuya Kinoshita
a6ddc331e9 Prevent array index out of bounds for tabattr in feed_table_tag()
Bug-Debian: https://github.com/tats/w3m/issues/60
2016-12-05 22:05:07 +09:00
Tatsuya Kinoshita
d7f55d5959 Prevent negative array index in process_textarea()
Bug-Debian: https://github.com/tats/w3m/issues/58
2016-12-05 21:48:30 +09:00
Tatsuya Kinoshita
f34c37f315 Prevent negative array index for marks in HTMLlineproc2body()
Bug-Debian: https://github.com/tats/w3m/issues/61
2016-12-05 21:48:20 +09:00
Tatsuya Kinoshita
0e66622582 Prevent negative value of row for pushTable() in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/67
2016-12-05 21:48:20 +09:00
Tatsuya Kinoshita
6c6a2cbced Prevent negative array index in getMetaRefreshParam()
Bug-Debian: https://github.com/tats/w3m/issues/63
2016-12-05 21:48:08 +09:00
Tatsuya Kinoshita
d57c13282a Prevent negative array index for marks in shiftAnchorPosition()
Bug-Debian: https://github.com/tats/w3m/issues/62
2016-12-05 21:44:17 +09:00
Tatsuya Kinoshita
13cca01a6f Update ChangeLog 2016-11-27 17:12:13 +09:00
Tatsuya Kinoshita
476e68f299 Merge pull request #50 from kcwu/fix-uninit-process_img
fix uninitialized variable in process_img(). fix #44
2016-11-27 17:08:47 +09:00
Tatsuya Kinoshita
4da2745dc8 Merge pull request #49 from kcwu/fix-menu-overflow
fix menu buffer-overflow
2016-11-27 17:08:02 +09:00
Tatsuya Kinoshita
8d31b4bab3 Add CVE IDs
cf. https://security-tracker.debian.org/tracker/source-package/w3m
    http://www.openwall.com/lists/oss-security/2016/11/24/1
2016-11-27 16:53:15 +09:00
Kuang-che Wu
41a607b06e fix uninitialized variable in process_img(). fix #44 2016-11-27 15:33:34 +08:00
Kuang-che Wu
7e1c05dd90 fix menu buffer-overflow 2016-11-27 15:24:34 +08:00
Tatsuya Kinoshita
6519207d0b Update ChangeLog 2016-11-20 19:32:05 +09:00
Tatsuya Kinoshita
c94a28011f Update NEWS 2016-11-20 19:30:18 +09:00
Tatsuya Kinoshita
2d1b5ecddc Update ChangeLog 2016-11-19 15:46:53 +09:00
Tatsuya Kinoshita
fdfab25608 Update NEWS 2016-11-19 15:41:22 +09:00
Tatsuya Kinoshita
251e191754 Update ChangeLog 2016-11-18 23:31:00 +09:00
Tatsuya Kinoshita
5fb44be9a6 Add CVE IDs
cf. https://security-tracker.debian.org/tracker/source-package/w3m
    http://seclists.org/oss-sec/2016/q4/452
2016-11-18 23:29:47 +09:00
Tatsuya Kinoshita
88110c2658 Fix type mismatch for pcsw_ucs_map_size
cf. https://github.com/tats/w3m/issues/43
2016-11-18 23:25:04 +09:00
Tatsuya Kinoshita
5a7dfaddc4 Update ChangeLog 2016-11-18 22:31:41 +09:00
Tatsuya Kinoshita
716bc12663 Prevent global-buffer-overflow in wc_any_to_ucs()
Bug-Debian: https://github.com/tats/w3m/issues/43
2016-11-18 22:30:19 +09:00
Tatsuya Kinoshita
8f4f57658c Update ChangeLog 2016-11-17 20:28:19 +09:00
Tatsuya Kinoshita
ba9d78faeb Prevent global-buffer-overflow in parseURL()
Bug-Debian: https://github.com/tats/w3m/issues/41
2016-11-17 20:19:55 +09:00
Tatsuya Kinoshita
ecfdcbe113 Prevent deref null pointer in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/42
2016-11-17 19:33:09 +09:00
Tatsuya Kinoshita
81a2932829 Update ChangeLog 2016-11-16 00:08:24 +09:00
Tatsuya Kinoshita
ec99f18638 Prevent deref null pointer in renderCoTable()
Bug-Debian: https://github.com/tats/w3m/issues/20#issuecomment-260649537
2016-11-15 23:59:57 +09:00
Tatsuya Kinoshita
08285d6a18 Update ChangeLog 2016-11-15 20:19:38 +09:00
Tatsuya Kinoshita
2a4a2fb9f1 Prevent infinite recursion with nested table and textarea
Bug-Debian: https://github.com/tats/w3m/issues/20#issuecomment-260590257
2016-11-15 20:11:52 +09:00
Tatsuya Kinoshita
61e50c5faf Revert "Prevent infinite recursion with nested table and textarea"
This reverts commit f393faf559.
2016-11-15 19:52:27 +09:00
Tatsuya Kinoshita
a088e0263c Prevent deref null pointer in shiftAnchorPosition()
Bug-Debian: https://github.com/tats/w3m/issues/40
2016-11-15 19:40:28 +09:00
Tatsuya Kinoshita
06caca13dd Update ChangeLog 2016-11-14 21:27:24 +09:00
Tatsuya Kinoshita
9db438094e Prevent null pointer deref due to bad form id
Bug-Debian: https://github.com/tats/w3m/issues/39
2016-11-14 21:22:13 +09:00
Tatsuya Kinoshita
0c3f5d0e0d Prevent array index out of bounds for symbol
Bug-Debian: https://github.com/tats/w3m/issues/38
2016-11-14 21:20:44 +09:00
Tatsuya Kinoshita
5b932eb715 Update ChangeLog 2016-11-13 17:38:22 +09:00
Tatsuya Kinoshita
a59a35211c Prevent null pointer dereference in HTMLlineproc2body for textarea_int
Bug-Debian: https://github.com/tats/w3m/issues/32#issuecomment-260170163
2016-11-13 17:33:53 +09:00
Tatsuya Kinoshita
58372435e9 Update ChangeLog 2016-11-12 23:29:42 +09:00
Tatsuya Kinoshita
f35417f4cb Update NEWS 2016-11-12 23:28:59 +09:00
Tatsuya Kinoshita
23381a4d35 Update ChangeLog 2016-11-12 23:12:41 +09:00
Tatsuya Kinoshita
f393faf559 Prevent infinite recursion with nested table and textarea
Bug-Debian: https://github.com/tats/w3m/issues/20
2016-11-12 22:50:01 +09:00
Tatsuya Kinoshita
fcaef5dfc8 Update ChangeLog 2016-11-09 23:39:23 +09:00
Tatsuya Kinoshita
e458def067 Check indent_level to prevent infinite recursion
Bug-Debian: https://github.com/tats/w3m/issues/37
2016-11-09 23:30:32 +09:00
Tatsuya Kinoshita
c7cad08b2c Update ChangeLog 2016-11-07 21:24:23 +09:00
Tatsuya Kinoshita
ff8510ab95 Prevent infinite recursion in HTMLlineproc0
Bug-Debian: https://github.com/tats/w3m/issues/36
2016-11-07 21:14:50 +09:00
Tatsuya Kinoshita
1b123c189c Update ChangeLog 2016-11-07 20:08:18 +09:00