summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2018-07-25xplist: Fix typo in error messageGravatar Bastien Nocera1-1/+1
2018-07-24libcnary: Fix memleak in node_debug()Gravatar Bastien Nocera1-0/+1
2017-06-08configure: Allow building with sanitizers (without fuzzers)Gravatar Nikias Bassen1-10/+35
2017-05-31bplist: Prevent store to misaligned address when writing real/date nodesGravatar Nikias Bassen1-9/+9
2017-05-31fuzz: Add some more crash samples reported via github issues.Gravatar Nikias Bassen15-0/+0
2017-05-30fuzz: Add crash/leak samples from OSS-FuzzGravatar Nikias Bassen16-0/+10299
2017-05-30fuzz: Move known crash/leak samples to per-fuzzer directoriesGravatar Nikias Bassen18-2/+2
2017-05-29fuzz: Add appropriate -max_len to fuzzers for testingGravatar Nikias Bassen1-2/+2
2017-05-29Prefer clang/clang++ over gcc/g++ (if installed)Gravatar Nikias Bassen1-0/+9
2017-05-29Integrate fuzzers into build systemGravatar Nikias Bassen6-1/+175
2017-05-29fuzz: Add some known previously crashing test casesGravatar Nikias Bassen17-0/+164
2017-05-29bplist: Work around misaligned reads reported by AddressSanitizerGravatar Nikias Bassen1-3/+3
2017-04-25Add fuzzing targets for libFuzzer used by Google's OSS-FuzzGravatar Nikias Bassen6-0/+122
2017-04-20Updated NEWS for release2.0.0Gravatar Nikias Bassen1-0/+30
2017-04-20Updated AUTHORS from commit historyGravatar Nikias Bassen1-1/+6
2017-04-20Bump version to 2.0.0 for releaseGravatar Nikias Bassen1-1/+1
2017-04-20Bump so version due to added functions to interfaceGravatar Nikias Bassen1-1/+1
2017-04-20build: Fix check for previously installed cython bindingsGravatar Nikias Bassen1-0/+1
2017-04-20build: Make sure plist.pxd is included in tarballsGravatar Christophe Fergeau1-3/+2
2017-04-20autofoo: Ensure that 'make distcheck' doesn't fail when cython is not installedGravatar Christophe Fergeau2-6/+5
2017-04-20test: Rename dates.test output files so the get removed upon 'make distclean'Gravatar Christophe Fergeau1-2/+2
2017-04-20test: Add missing test files to Makefile.am/EXTRA_DISTGravatar Christophe Fergeau1-1/+42
2017-04-20bplist: Fix missing break in switch statement in plist_to_bin()Gravatar Nikias Bassen1-0/+1
2017-04-20bplist: Suppress compiler warnings with proper castsGravatar Nikias Bassen1-3/+3
2017-04-20cython: Remove references to libxml2 flags from Makefile.amGravatar Nikias Bassen1-2/+2
2017-04-20test: Fix wrong filename in EXTRA_DIST entry of Makefile.amGravatar Nikias Bassen1-1/+1
2017-04-19bplist: Fix integer overflow check (offset table size)Gravatar Nikias Bassen1-3/+17
2017-04-14Initialize safe_year in time64.cGravatar Greg Dennis1-2/+2
2017-04-06Update time64_limits.hGravatar Greg Dennis1-0/+2
2017-04-02xplist: Plug another memory leakGravatar Nikias Bassen1-0/+3
2017-03-29xplist: Prevent memory leak(s) when parsing failsGravatar Nikias Bassen1-2/+2
2017-03-29xplist: Make XML parsing non-recursive to prevent stack overflow on deep-stru...Gravatar Nikias Bassen1-79/+103
2017-03-28libcnary: Remove unused 'node' parameter from node_list_create()Gravatar Nikias Bassen3-3/+3
2017-03-26bplist: Make sure sanity checks work on 32bit platformsGravatar Nikias Bassen1-10/+14
2017-03-18autocconf: Add android exception for pthread detectionGravatar Nikias Bassen1-2/+2
2017-02-18base64: Prevent undefined shift when parsing invalid base64 encoded dataGravatar Nikias Bassen1-3/+3
2017-02-15xplist: Improve writing of large PLIST_DATA nodes by growing buffer in advanceGravatar Nikias Bassen4-3/+11
2017-02-10bplist: Fix data range check for string/data/dict/array nodesGravatar Nikias Bassen1-6/+6
2017-02-10bplist: Fix integer overflow resulting in OOB heap buffer readGravatar Nikias Bassen1-0/+5
2017-02-09xplist: Fix OOB heap buffer read with empty data nodesGravatar Nikias Bassen1-2/+4
2017-02-09bplist: Make sure to detect integer overflow when handling unicode node sizeGravatar Nikias Bassen1-0/+4
2017-02-09xplist: Prevent assert when parsing CF$UID dict with invalid value nodeGravatar Nikias Bassen1-0/+5
2017-02-08xplist: Use proper variable size for integer from string parsingGravatar Nikias Bassen1-2/+2
2017-02-07plist: Fix assert() to allow 16 or 8 byte integer sizes (16 bytes = unsigned ...Gravatar Nikias Bassen1-1/+1
2017-02-07bplist: Properly handle some more malloc() failure situationsGravatar Nikias Bassen1-3/+18
2017-02-07bplist: Make sure to bail out if malloc() fails in parse_unicode_node()Gravatar Nikias Bassen1-0/+5
2017-02-07bplist: Make sure to bail out if malloc() fails in parse_data_node()Gravatar Nikias Bassen1-0/+5
2017-02-07bplist: Make sure to bail out if malloc() fails in parse_string_node()Gravatar Nikias Bassen1-0/+5
2017-02-07xplist: Prevent some more strncmp related OOB readsGravatar Nikias Bassen1-4/+4
2017-02-07xplist: Really fix OOB read when parsing DOCTYPEGravatar Nikias Bassen1-1/+1