rufus/src/libcdio/iso9660
Pete Batard 8a8e418751
[iso] fix a buffer overflow in iso9660/iso9660_fs.c
* Whereas the length of the buffer allocated for the UTF-8 filename string is
  the same length as the UCS-2 (which means it can store twice as many UTF-8
  bytes as there are characters in the filename), it is still possible for the
  converted UTF-8 string to overflow this buffer if the name contains glyphs
  that use 3 or 4-byte sequences.
* As a result, use strncpy with the actual size of the UTF-8 filename buffer
  (the following bytes are calloc'd to zero so the truncated string will be
  NUL terminated) and produce a warning if the filename is truncated.
* Vulnerability discovered and reported by Mansour Gashasbi (@gashasbi).
2024-04-09 00:09:21 +02:00
..
Makefile.am [misc] use $(srcdir) in Makefiles 2020-02-10 12:08:04 +00:00
Makefile.in [mingw] use delay loading for DLLs that are subject to side loading 2022-04-12 11:09:59 +01:00
iso9660.c [iso] improve Rock Ridge CE handling 2023-03-23 14:47:53 +00:00
iso9660_fs.c [iso] fix a buffer overflow in iso9660/iso9660_fs.c 2024-04-09 00:09:21 +02:00
iso9660_private.h [iso] update libcdio to v0.90 2012-11-04 01:33:54 +00:00
rock.c [iso] improve Rock Ridge CE handling 2023-03-23 14:47:53 +00:00
xa.c [iso] update libcdio to v0.93 2014-10-31 18:52:23 +00:00