david/ipxe
david
/
ipxe
Archived
1
0
Fork 0
This repository has been archived on 2020-12-06. You can view files and clone it, but cannot push or open issues or pull requests.
ipxe/src/core
Michael Brown de2616165b [xfer] Avoid using stack-allocated memory in xfer_printf()
xfer_printf() occasionally has to deal with strings that are
potentially long, such as HTTP URIs with multiple query parameters.
Allocating these on the stack can lead to stack overruns and memory
corruption.

Fix by using vasprintf() instead of a stack allocation.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
2012-04-23 20:30:48 +01:00
..
acpi.c [block] Replace gPXE block-device API with an iPXE asynchronous interface 2010-09-14 20:37:15 +01:00
ansiesc.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
asprintf.c [legal] Add a selection of FILE_LICENCE declarations 2009-05-18 08:33:25 +01:00
assert.c [libc] Allow assertion failures to be counted 2011-10-14 14:33:31 +01:00
base16.c [base16] Add generic base16 encoding and decoding routines 2010-05-28 15:41:37 +01:00
base64.c [base64] Add ability to decode base64 strings 2010-05-28 12:47:10 +01:00
basename.c [legal] Add a selection of FILE_LICENCE declarations 2009-05-18 08:33:25 +01:00
bitmap.c [bitmap] Fix bitmaps on 64-bit 2010-05-27 01:18:17 +01:00
bitops.c [legal] Add a selection of FILE_LICENCE declarations 2009-05-18 08:33:25 +01:00
blockdev.c [block] Replace gPXE block-device API with an iPXE asynchronous interface 2010-09-14 20:37:15 +01:00
console.c [console] Allow usage to be defined independently for each console 2012-03-26 17:40:01 +01:00
cpio.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
ctype.c [script] Allow for DOS-style line endings in scripts 2009-06-03 10:13:29 +01:00
cwuri.c [uri] Special case NULL in churi() 2010-04-25 17:25:30 +01:00
debug.c [console] Allow usage to be defined independently for each console 2012-03-26 17:40:01 +01:00
debug_md5.c [debug] Add DBG_MD5() and related macros 2010-12-09 13:13:31 +00:00
device.c [init] Remove concept of "shutdown exit flags" 2011-01-27 20:40:26 +00:00
downloader.c [downloader] Use a more meaningful error message when out of memory 2012-03-27 00:43:07 +01:00
edd.c [int13] Add infrastructure to support EDD version 4.0 2010-09-22 17:09:56 +01:00
errno.c Split strerror() out from errno.c 2006-12-20 03:49:36 +00:00
exec.c [cmdline] Allow "sleep" command to be interrupted 2011-10-24 15:52:57 +01:00
fnrec.c [fnrec] Enhance function recording 2010-12-09 13:11:27 +00:00
gdbserial.c [legal] Add FILE_LICENCE macro to some GPL-v2-or-later files 2010-12-03 23:38:15 +00:00
gdbstub.c [legal] Add FILE_LICENCE macro to some GPL-v2-or-later files 2010-12-03 23:38:15 +00:00
gdbudp.c [legal] Add FILE_LICENCE macro to some GPL-v2-or-later files 2010-12-03 23:38:15 +00:00
getkey.c [console] Move include/console.h to include/ipxe/console.h 2011-03-09 20:09:26 +00:00
getopt.c [getopt] Accept "--" as an end-of-options marker 2011-11-02 00:23:57 +00:00
hw.c [hw] Eliminate polling while waiting for window to open 2011-06-28 14:45:11 +01:00
i82365.c Initial revision 2005-03-08 18:53:11 +00:00
image.c [image] Fix use-after-free in debug messages 2012-03-30 20:50:25 +01:00
init.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
interface.c [interface] Allow for non-pass-through interface methods 2010-06-22 19:12:40 +01:00
iobuf.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
job.c [interface] Convert all job-control interfaces to generic interfaces 2010-06-22 14:40:09 +01:00
linebuf.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
lineconsole.c [console] Do not share ANSI escape context between lineconsole users 2012-03-26 21:58:50 +01:00
log.c [console] Add "log message" console usage and an internal syslog() call 2012-03-26 19:58:14 +01:00
main.c [main] Add the "scriptlet" setting 2011-03-28 18:50:27 +01:00
malloc.c [linux] Make malloc and linux_umalloc valgrindable 2011-03-27 21:03:05 +01:00
menu.c [menu] Add the abstract concept of a menu 2012-03-29 13:44:48 +01:00
misc.c [libc] Allow strtoul() to interpret negative numbers 2012-04-17 10:42:08 +01:00
monojob.c [monojob] Avoid overflow when calculating percentage progress 2011-03-26 13:14:53 +00:00
null_nap.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
null_sanboot.c [sanboot] Add "sanhook" and "sanunhook" commands 2011-04-24 16:44:34 +01:00
null_time.c [time] Define an API for getting the current time 2012-03-19 22:13:27 +00:00
nvo.c [settings] Formalise notion of setting applicability 2011-03-22 19:54:58 +00:00
open.c [xfer] Expose xfer_uri_opener() 2011-01-27 18:46:07 +00:00
parseopt.c [menu] Add menu commands 2012-03-29 14:02:02 +01:00
pc_kbd.c [console] Move include/console.h to include/ipxe/console.h 2011-03-09 20:09:26 +00:00
pcmcia.c [console] Move putchar() and getchar() declarations to stdio.h 2012-03-26 14:43:52 +01:00
posix_io.c [xfer] Generalise metadata "whence" field to "flags" field 2010-09-03 21:21:14 +01:00
process.c [process] Add support for one-shot processes 2011-06-28 14:45:09 +01:00
random.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
refcnt.c [refcnt] Check reference validity on each use of ref_get() and ref_put() 2010-11-08 03:35:35 +00:00
resolv.c [resolv] Use a one-shot process for the numeric resolver 2011-06-28 14:45:09 +01:00
serial.c [build] Rename gPXE to iPXE 2010-04-19 23:43:39 +01:00
serial_console.c [console] Remove "log message" usage from interactive console defaults 2012-03-27 00:51:50 +01:00
settings.c [settings] Add fetch_setting_copy() 2012-04-19 16:10:07 +01:00
string.c [legal] Add a selection of FILE_LICENCE declarations 2009-05-18 08:33:25 +01:00
stringextra.c [legal] Add FILE_LICENCE macro to some GPL-v2 files 2010-12-03 23:23:35 +00:00
strtoull.c [libc] Allow strtoul() to interpret negative numbers 2012-04-17 10:42:08 +01:00
time.c [libc] Add mktime() function 2012-03-19 17:35:46 +00:00
timer.c [legal] Add a selection of FILE_LICENCE declarations 2009-05-18 08:33:25 +01:00
uri.c [uri] Fix NULL dereference in parse_uri() 2010-04-25 17:21:49 +01:00
uuid.c [settings] Split fetching and storing out of setting type handlers 2012-04-17 10:46:50 +01:00
vsprintf.c [console] Move putchar() and getchar() declarations to stdio.h 2012-03-26 14:43:52 +01:00
xfer.c [xfer] Avoid using stack-allocated memory in xfer_printf() 2012-04-23 20:30:48 +01:00