1. 03 Mar, 2019 1 commit
  2. 12 Feb, 2019 1 commit
  3. 04 Jan, 2019 2 commits
  4. 21 Dec, 2018 1 commit
  5. 18 Dec, 2018 1 commit
  6. 17 Dec, 2018 1 commit
  7. 02 Dec, 2018 1 commit
  8. 24 Nov, 2018 1 commit
  9. 15 Nov, 2018 1 commit
  10. 10 Nov, 2018 1 commit
  11. 08 Nov, 2018 1 commit
  12. 07 Nov, 2018 1 commit
  13. 06 Nov, 2018 20 commits
  14. 02 Nov, 2018 2 commits
    • Philip Withnall's avatar
      gvariant: Fix checking arithmetic for tuple element ends · 22350edc
      Philip Withnall authored
      When checking whether a serialised GVariant tuple is in normal form,
      it’s possible for `offset_ptr -= offset_size` to underflow and wrap
      around, resulting in gvs_read_unaligned_le() reading memory outside the
      serialised GVariant bounds.
      
      See §(Tuples) in gvariant-serialiser.c for the documentation on how
      tuples are serialised. Briefly, all variable-length elements in the
      tuple have an offset to their end stored in an array of offsets at the
      end of the tuple. The width of each offset is in offset_size. offset_ptr
      is added to the start of the serialised tuple to get the offset which is
      currently being examined. The offset array is in reverse order compared
      to the tuple elements, hence the subtraction.
      
      The bug can be triggered if a tuple contains a load of variable-length
      elements, each of whose length is actually zero (i.e. empty arrays).
      
      Includes a unit test.
      
      oss-fuzz#9801
      Signed-off-by: Philip Withnall's avatarPhilip Withnall <withnall@endlessm.com>
      22350edc
    • Philip Withnall's avatar
      ci: Update CI image to use 2-58:v1 from registry · 7ac9adbe
      Philip Withnall authored
      The CI image which this glib-2-56 branch was previously using has been
      deleted from the registry (master has moved on). Tweak the CI
      configuration to use the glib-2-58 image, since there doesn’t seem to be
      much point in adding an image just for glib-2-56, given how little
      development is still needed on this branch.
      Signed-off-by: Philip Withnall's avatarPhilip Withnall <withnall@endlessm.com>
      7ac9adbe
  15. 07 Oct, 2018 1 commit
  16. 21 Sep, 2018 1 commit
  17. 17 Sep, 2018 1 commit
  18. 14 Sep, 2018 1 commit
  19. 13 Sep, 2018 1 commit