mirror of
https://github.com/pbatard/rufus.git
synced 2026-11-13 16:53:58 +00:00
8fd3b523c4* DownloadToFileOrBufferEx() sizes its buffer from the server's Content-Length, but WinINet does not enforce that value (e.g. when Transfer-Encoding: chunked is also sent, or with values that wrap the 'total_size + 2' allocation size around), which lets a server write past the end of the heap buffer before any signature validation takes place. * Likewise, CheckForUpdatesThread() would wrap 'dwTotalSize + 1' to 0 for a 0xFFFFFFFF length. * Also prevent HTTPS to HTTP downgrades, since WinINet silently follows such redirects when INTERNET_FLAG_NO_UI is used, regardless of INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTP. * Also use HTTPS for the PDB downloads of the (currently unused) DLL address resolver. * Addresses https://github.com/pbatard/rufus/security/advisories/GHSA-hrxr-p5wv-qxm2.
14 lines
325 B
Modula-2
14 lines
325 B
Modula-2
EXPORTS
|
|
HttpQueryInfoA@20
|
|
HttpOpenRequestA@32
|
|
HttpSendRequestA@20
|
|
HttpAddRequestHeadersA@16
|
|
InternetCloseHandle@4
|
|
InternetConnectA@32
|
|
InternetCrackUrlA@16
|
|
InternetGetConnectedState@8
|
|
InternetGetLastResponseInfoA@12
|
|
InternetOpenA@20
|
|
InternetQueryOptionA@16
|
|
InternetReadFile@16
|
|
InternetSetOptionA@16
|