rufus/src
Pete Batard 513c5f44a5
[misc] fix possible buffer overflows in _snprintf()
* _snprintf() is not always guaranteed to NUL terminate a string which could
  lead to  buffer overflows in iso_extract_files() and iso_extract_files().
* Fix this by switching to using the more secure _snprintf_s().
* Vulnerability discovered and reported by Mansour Gashasbi (@gashasbi).
* For good measure, we also switch to the strncat_s() where possible and also
  use memmove() instead of memcpy()/strcpy() as the behaviour of the latter on
  overlapping memory regions is undefined.
* Also fix some additional MinGW warnings regarding casts and nb_blocks.
2024-04-17 17:19:03 +01:00
..
bled [uefi] fix path of SKUSiPolicy.p7b for WOW 2023-07-01 20:22:10 +01:00
ext2fs [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
getopt [misc] drop Clang support and move VS2017 project files to .vs 2017-11-11 15:41:04 +00:00
libcdio [iso] fix a buffer overflow in iso9660/iso9660_fs.c 2024-04-09 00:09:21 +02:00
ms-sys [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
msvc-missing [ext2fs] initial ext2fs support 2019-04-12 21:32:40 +01:00
syslinux [syslinux] improve support for Syslinux based Slax ISOs 2023-10-11 20:46:46 +01:00
.editorconfig [misc] finally, set .editorconfig to use UTF-8 *without* BOM 2017-08-14 21:40:56 +01:00
Makefile.am [uefi] don't revoke Windows 11 or post Windows 10 20H1 boot media yet 2023-07-15 23:20:59 +02:00
Makefile.in [uefi] don't revoke Windows 11 or post Windows 10 20H1 boot media yet 2023-07-15 23:20:59 +02:00
badblocks.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
badblocks.h [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
cpu.c [checksum] enable x86 acceleration if the CPU supports it 2022-12-08 11:15:48 +00:00
cpu.h [checksum] enable x86 acceleration if the CPU supports it 2022-12-08 11:15:48 +00:00
db.h [grub] update DB for GRUB 2.12~rc1 2023-07-13 10:11:52 +02:00
dev.c [misc] don't pass an output size in DeviceIoControl() when not needed 2024-04-01 14:56:06 +01:00
dev.h [mingw] use delay loading for DLLs that are subject to side loading 2022-04-12 11:09:59 +01:00
dos.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
dos.h [misc] set rufus-next to 1.3.3, update copyright 2013-02-02 15:47:56 +00:00
dos_locale.c [dos] fix a CodeQL warning and harmonize code 2024-02-09 17:00:42 +00:00
drive.c [misc] don't pass an output size in DeviceIoControl() when not needed 2024-04-01 14:56:06 +01:00
drive.h [misc] don't pass an output size in DeviceIoControl() when not needed 2024-04-01 14:56:06 +01:00
format.c [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
format.h [vhd] add write support for .vhdx and .ffu images 2023-07-06 19:47:26 +01:00
format_ext.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
format_fat32.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
gpt_types.h [loc] fix Russian translation for KB/MB/GB... 2020-12-11 17:10:48 +00:00
hash.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
hdd_vs_ufd.h [misc] add an exception for 23A9:EF18 UFDs 2023-05-29 18:04:42 +01:00
icon.c [misc] don't pass an output size in DeviceIoControl() when not needed 2024-04-01 14:56:06 +01:00
iso.c [misc] fix possible buffer overflows in _snprintf() 2024-04-17 17:19:03 +01:00
license.h [process] move the search for conflicting process to a background thread 2023-10-10 22:22:45 +01:00
localization.c [misc] harden usage of uprintf() 2023-04-20 17:43:24 +01:00
localization.h [misc] fix MinGW/gcc 10.x multiple definition errors 2020-05-18 21:25:44 +01:00
localization_data.h [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
localization_data.sh [misc] silence Coverity warnings 2024-01-08 14:34:57 +00:00
mbr_types.h [iso] add ISOHybrid "CD" partition and ISO9660 file system detection 2022-04-05 18:31:03 +01:00
missing.h [misc] move hash definitions to rufus.h 2024-03-27 19:02:24 +00:00
msapi_utf8.h [cmp] Enable extraction of zip archives outside of ISO copy mode 2024-03-12 17:41:27 +00:00
net.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
parser.c [misc] fix possible buffer overflows in _snprintf() 2024-04-17 17:19:03 +01:00
pki.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
process.c [process] add extra exception handling on NtClose() 2024-04-04 17:40:20 +01:00
process.h [misc] update ChangeLog for 4.3 BETA 2023-10-12 19:46:10 +01:00
re.c [misc] add regexp engine 2021-04-22 22:43:20 +01:00
re.h [misc] add regexp engine 2021-04-22 22:43:20 +01:00
registry.h [wue] add automatic local account creation and regional settings duplication 2022-07-19 19:11:06 +01:00
resource.h [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
rufus.c [misc] fix possible buffer overflows in _snprintf() 2024-04-17 17:19:03 +01:00
rufus.h [misc] fix possible buffer overflows in _snprintf() 2024-04-17 17:19:03 +01:00
rufus.manifest [dev] add exception for Realtek card readers 2021-01-06 19:27:31 +00:00
rufus.rc [misc] fix possible buffer overflows in _snprintf() 2024-04-17 17:19:03 +01:00
settings.h [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
smart.c [iso] fix a possible buffer overflow in GetGrubVersion() 2023-04-01 14:39:25 +02:00
smart.h [misc] use the more univerasal _mm_alloc() instead of _aligned_malloc() 2016-06-10 12:42:43 +01:00
stdfn.c [misc] don't pass an output size in DeviceIoControl() when not needed 2024-04-01 14:56:06 +01:00
stdio.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
stdlg.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
syslinux.c [iso] fix a buffer overflow in syslinux.c 2024-04-10 10:26:31 +02:00
ui.c [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
ui.h [vhd] enable saving device to compressed VHDX 2023-07-01 20:43:26 +01:00
ui_data.h [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
vhd.c [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
vhd.h [vhd] fix truncated write operation when using a VHDX image as source 2024-03-04 00:49:57 +00:00
winio.h [core] switch to async I/O for image writing 2021-04-22 01:01:56 +01:00
wue.c [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
wue.h [wue] improve Windows version reporting from ISO/.wim 2022-10-04 11:58:30 +01:00