mirror of
https://github.com/pbatard/rufus.git
synced 2026-11-13 16:53:58 +00:00
8fd3b523c4* DownloadToFileOrBufferEx() sizes its buffer from the server's Content-Length, but WinINet does not enforce that value (e.g. when Transfer-Encoding: chunked is also sent, or with values that wrap the 'total_size + 2' allocation size around), which lets a server write past the end of the heap buffer before any signature validation takes place. * Likewise, CheckForUpdatesThread() would wrap 'dwTotalSize + 1' to 0 for a 0xFFFFFFFF length. * Also prevent HTTPS to HTTP downgrades, since WinINet silently follows such redirects when INTERNET_FLAG_NO_UI is used, regardless of INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTP. * Also use HTTPS for the PDB downloads of the (currently unused) DLL address resolver. * Addresses https://github.com/pbatard/rufus/security/advisories/GHSA-hrxr-p5wv-qxm2. |
||
|---|---|---|
| .. | ||
| cfgmgr32.def | ||
| crypt32.def | ||
| dwmapi.def | ||
| Makefile.am | ||
| Makefile.in | ||
| setupapi.def | ||
| uxtheme.def | ||
| version.def | ||
| virtdisk.def | ||
| wininet.def | ||
| wintrust.def | ||