valitydev/thrift
14
0
Fork 0
mirror of https://github.com/valitydev/thrift.git synced 2024-11-07 18:58:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
435e1c4f70
thrift/lib
History
Jake Farrell 435e1c4f70 THRIFT-1643:Denial of Service attack in TBinaryProtocol.readString 
Client: java
Patch: Niraj Tolia 

In readString, if the string field's size is greater than the number of bytes remaining in the byte array to deserialize, libthrift will happily allocate a byte array of that size in readStringBody, filling the heap.



git-svn-id: https://svn.apache.org/repos/asf/thrift/trunk@1397397 13f79535-47bb-0310-9956-ffa450edef68
2012-10-12 00:43:13 +00:00
..
as3 Thrift-1079:Support i64 in AS3 2012-05-11 02:23:00 +00:00
c_glib THRIFT-1116 Compilation error in file TSSLSocket.cpp on FreeBSD-8.0 2012-07-18 12:03:20 +00:00
cocoa Thrift-1662:"removeObject:" should be "removeObserver:" in [-TSocketServer dealloc]? 2012-07-27 15:48:37 +00:00
cpp Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
csharp Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
d Thrift-1721:Dist broken due to 0.8.0 to 0.9.0 changes 2012-10-11 00:29:11 +00:00
delphi Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
erl Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
go THRIFT-1350: Go library code does not build against latest release 2011-09-19 23:38:39 +00:00
hs Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
java THRIFT-1643:Denial of Service attack in TBinaryProtocol.readString 2012-10-12 00:43:13 +00:00
javame/src/org/apache/thrift THRIFT-1612 Base64 encoding is broken 2012-05-27 18:05:16 +00:00
js Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
nodejs Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
ocaml Thrift-1322: OCaml lib fail to compile: Thrift.ml line 305, int vs int32 mismatch 2011-09-06 16:26:58 +00:00
perl Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
php Thrift-1721:Dist broken due to 0.8.0 to 0.9.0 changes 2012-10-11 00:29:11 +00:00
py Updating Thrift trunk version to 1.0.0-dev 2012-10-11 20:34:25 +00:00
rb Thrift-1023:Thrift encoding (UTF-8) issue with Ruby 1.9.2 2012-10-09 01:10:43 +00:00
st THRIFT-643. smalltalk: Generated code doesnt load on Squeak3.10.2-7179-basic and PharoCore-1.0-10491rc1 images 2010-01-19 05:18:55 +00:00
Makefile.am Thrift-1721:Dist broken due to 0.8.0 to 0.9.0 changes 2012-10-11 00:29:11 +00:00