nerd/rufus
1
1
Fork 0
mirror of https://github.com/pbatard/rufus.git synced 2026-11-13 16:53:58 +00:00
Code Issues 1 Projects Releases Wiki Activity
rufus/src
History
Exact
Pete Batard 9e243209f8
 [iso] further mitigate potential overflows when appending ISO-9660 filenames 
* The patch from 477cebb was still missing some elements to properly address the issue
  as a buffer of size 256 (which we wrongly asserted couldn't be overflowed) was under
  dimensioned when dealing with 128 character UCS-2 sequences. We also should have used
  < for the comparison and not <=.
* Fix this by redimensioning the buffer, fixing the comparison, and also not let the
  user proceed if they choose to continue on the assert prompt. While we're at it, also
  make sure to use our if_assert_###() constructs were appropriate.
* Also fix another possible overflow in drive.c when copying GPT partition names, as
  they are not guaranteed to be NUL terminated, and review our other usages of wcscpy.
* Also fix a potential issue for local accounts with whitespaces, when setting Windows
  To Go drives offline.
* Addresses https://github.com/pbatard/rufus/security/advisories/GHSA-xx6m-qq8h-8882.
2026-11-11 17:24:22 +00:00
..
bled [misc] update MinGW autotools dependencies to latest 2026-10-15 20:09:36 +01:00
ext2fs [misc] update MinGW autotools dependencies to latest 2026-10-15 20:09:36 +01:00
getopt [misc] drop Clang support and move VS2017 project files to .vs 2017-11-11 15:41:04 +00:00
libcdio [iso] further mitigate malicious multi-extent exploitation 2026-11-11 17:12:26 +00:00
ms-sys [internal] normalize line endings 2026-11-03 11:17:26 +00:00
msvc-missing [wue] switch to using wimlib for all WIM operations 2025-05-05 00:58:07 +01:00
syslinux [internal] normalize line endings 2026-11-03 11:17:26 +00:00
wimlib [wue] re-instate the use of . as part of a local username 2026-10-23 18:24:18 +01:00
.editorconfig [misc] finally, set .editorconfig to use UTF-8 *without* BOM 2017-08-14 21:40:56 +01:00
badblocks.c [internal] rename the if_not_assert() macro to a more explicit if_assert_fails() 2025-07-25 14:56:22 +01:00
badblocks.h [misc] improve readability of error code handling 2024-04-01 02:16:41 +01:00
cregex.h [regex] fix signed-char OOB/UB in char classes and 0-byte alloc on empty pattern 2026-08-24 12:52:59 +01:00
cregex_compile.c [efi] update UEFI:NTFS to latest 2025-11-20 13:07:40 +00:00
cregex_parse.c [regex] fix heap OOB read past pattern buffer in parse_char_class() 2026-08-24 12:54:36 +01:00
cregex_vm.c [core] switch to jserv/cregex for the regexp parser 2025-06-27 15:29:08 +01:00
darkmode.c [ui] persist the toggle dark mode setting 2025-10-14 13:22:59 +01:00
darkmode.h [ui ] fix broken dark mode on old Windows 10 builds 2025-07-29 17:57:36 +01:00
db.h [misc] preserve runtime UEFI media validation option between sessions 2026-10-29 15:57:53 +00:00
dev.c [core] actually report USB 3.2/USB 4.0 devices 2026-10-15 14:55:48 +01:00
dev.h [core] actually report USB 3.2/USB 4.0 devices 2026-10-15 14:55:48 +01:00
dos.c Fix a Coverity warning 2026-01-22 18:31:17 +00:00
dos.h [misc] set rufus-next to 1.3.3, update copyright 2013-02-02 15:47:56 +00:00
dos_locale.c [dos] fix a CodeQL warning and harmonize code 2024-02-09 17:00:42 +00:00
drive.c [iso] further mitigate potential overflows when appending ISO-9660 filenames 2026-11-11 17:24:22 +00:00
drive.h [core] improve raw image partition (re)mount 2026-09-25 18:35:15 +01:00
efi.h [uefi] embed and allow the download of official signed DBX binaries 2025-03-27 16:11:45 +00:00
format.c [core] prevent TOCTOU when reusing the files downloaded for BIOS/Legacy boot 2026-10-28 12:36:21 +00:00
format.h [vhd] add write support for .vhdx and .ffu images 2023-07-06 19:47:26 +01:00
format_ext.c [ui] progress reporting improvements 2025-05-03 21:32:10 +01:00
format_fat32.c [ui] progress reporting improvements 2025-05-03 21:32:10 +01:00
gpt_types.h [core] improve GPT partition type reporting 2026-03-03 16:34:59 +00:00
hash.c [iso] fix a vulnerability where malicious ISOs could drop content on the system drive through symlinks 2026-11-10 17:27:23 +00:00
hdd_vs_ufd.h [dev] add more exceptions to the UFD vs HDD list 2026-09-08 12:59:29 +01:00
icon.c Fix a Coverity warning 2026-01-22 18:31:17 +00:00
iso.c [iso] further mitigate potential overflows when appending ISO-9660 filenames 2026-11-11 17:24:22 +00:00
license.h [wue] add an option to copy SkuSiPolicy.p7b to the ESP on install 2026-03-06 17:36:44 +00:00
localization.c [misc] fix various printf issues 2025-09-03 11:32:12 +01:00
localization.h [misc] fix MinGW/gcc 10.x multiple definition errors 2020-05-18 21:25:44 +01:00
localization_data.h [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
localization_data.sh [dev] try to support non USB compliant devices that use VID 0000 2026-01-12 12:21:11 +00:00
Makefile.am [core] switch to jserv/cregex for the regexp parser 2025-06-27 15:29:08 +01:00
Makefile.in [misc] update MinGW autotools dependencies to latest 2026-10-15 20:09:36 +01:00
mbr_types.h [iso] add ISOHybrid "CD" partition and ISO9660 file system detection 2022-04-05 18:31:03 +01:00
missing.h [iso] improve UEFI bootloader reporting 2025-05-26 20:56:26 +01:00
msapi_utf8.h [iso] fix a vulnerability where malicious ISOs could drop content on the system drive through symlinks 2026-11-10 17:27:23 +00:00
net.c [net] prevent heap overflows from untrusted Content-Length values 2026-10-28 19:02:32 +00:00
ntdll.h [process] improve the process search 2026-01-14 23:28:11 +00:00
parser.c [dbx] fix a potential buffer overflow when parsing the remote SBAT 2026-11-03 12:54:17 +00:00
pki.c [uefi] fix various possible out-of-bounds reads during PE parsing/processing 2026-10-28 18:31:31 +00:00
process.c [process] don't report read-only access from explorer.exe in potentially conflicting processes 2026-01-17 15:15:22 +00:00
registry.h [internal] rename the if_not_assert() macro to a more explicit if_assert_fails() 2025-07-25 14:56:22 +01:00
resource.h [internal] normalize line endings 2026-11-03 11:17:26 +00:00
rufus.c [iso] fix a possible crash during syslinux file downloads 2026-11-09 23:50:14 +00:00
rufus.h [md5sum] fix a potential buffer overflow when updating md5sum.txt 2026-11-03 11:47:40 +00:00
rufus.manifest [dev] add exception for Realtek card readers 2021-01-06 19:27:31 +00:00
rufus.rc [iso] further mitigate potential overflows when appending ISO-9660 filenames 2026-11-11 17:24:22 +00:00
settings.h [ui] persist the toggle dark mode setting 2025-10-14 13:22:59 +01:00
smart.c [iso] fix a possible buffer overflow in GetGrubVersion() 2023-04-01 14:39:25 +02:00
smart.h [misc] use the more univerasal _mm_alloc() instead of _aligned_malloc() 2016-06-10 12:42:43 +01:00
stdfn.c [core] drop the use of Group Policies to set NoDriveTypeAutorun 2026-09-21 14:15:57 +01:00
stdio.c [iso] fix a vulnerability where malicious ISOs could drop content on the system drive through symlinks 2026-11-10 17:27:23 +00:00
stdlg.c [wue] re-instate the use of . as part of a local username 2026-10-23 18:24:18 +01:00
syslinux.c [iso] fix a possible crash during syslinux file downloads 2026-11-09 23:50:14 +00:00
ui.c [internal] rename the if_not_assert() macro to a more explicit if_assert_fails() 2025-07-25 14:56:22 +01:00
ui.h [ui] fix wrong colour for disabled text in dark mode 2025-07-03 22:28:42 +02:00
ui_data.h [ui] add runtime UEFI media validation as a selectable advanced option 2024-04-02 17:18:06 +01:00
vhd.c [cmp] update Bled to latest and get projected size for compressed disk images 2026-06-21 14:26:11 +01:00
vhd.h [misc] sign the GitHub ALPHA builds using self-signed credentials 2025-07-01 14:23:34 +01:00
winio.h [core] work around Windows' moronic behaviour for mounted VHDs 2024-06-03 12:58:37 +01:00
wue.c [iso] further mitigate potential overflows when appending ISO-9660 filenames 2026-11-11 17:24:22 +00:00
wue.h [wue] improve Windows version reporting from ISO/.wim 2022-10-04 11:58:30 +01:00
xml.c [core] fix unrestricted entity expansion and integer overflow in ezxml 2026-06-17 11:02:45 +01:00
xml.h [wue] add ezxml support for WIM index parsing 2025-05-02 16:51:30 +01:00