<feed xmlns='http://www.w3.org/2005/Atom'>
<title>plan9port/src/lib9pclient, branch patch</title>
<subtitle>Plan 9 from User Space (with patches)</subtitle>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/'/>
<entry>
<title>fspread: fix buffer overflow</title>
<updated>2021-04-05T09:19:49+00:00</updated>
<author>
<name>Günther Noack</name>
<email>guenther@unix-ag.uni-kl.de</email>
</author>
<published>2020-08-17T19:11:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=878b30c0bc1446ba933dc4539438512766183500'/>
<id>878b30c0bc1446ba933dc4539438512766183500</id>
<content type='text'>
Without this fix, fspread is trusting the server to return as much
data as requested, or less. If a server responds with more data
though, fspread writes beyond the bounds of the buffer to fill, which
is passed in by the caller. It depends on the caller of fspread()
where that buffer is, so there are various possible attack vectors.

In the Plan9 kernel, I found this implemented in devmnt.c, where
overly large responses are truncated to the size requested before
copying, so I assume that this strategy works here too.

This also affects fsread() and fsreadn(), which are based on
fspread().
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Without this fix, fspread is trusting the server to return as much
data as requested, or less. If a server responds with more data
though, fspread writes beyond the bounds of the buffer to fill, which
is passed in by the caller. It depends on the caller of fspread()
where that buffer is, so there are various possible attack vectors.

In the Plan9 kernel, I found this implemented in devmnt.c, where
overly large responses are truncated to the size requested before
copying, so I assume that this strategy works here too.

This also affects fsread() and fsreadn(), which are based on
fspread().
</pre>
</div>
</content>
</entry>
<entry>
<title>Trivial changes: whitespace and modes.</title>
<updated>2020-01-10T14:54:30+00:00</updated>
<author>
<name>Dan Cross</name>
<email>cross@gajendra.net</email>
</author>
<published>2020-01-10T14:44:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=fa325e9b42b0bdfb48857d1958d9fb7ceac55151'/>
<id>fa325e9b42b0bdfb48857d1958d9fb7ceac55151</id>
<content type='text'>
Remote whitespace at the ends of lines.
Remove blank lines from the ends of files.
Change modes on source files so that they
are not executable.

Signed-off-by: Dan Cross &lt;cross@gajendra.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remote whitespace at the ends of lines.
Remove blank lines from the ends of files.
Change modes on source files so that they
are not executable.

Signed-off-by: Dan Cross &lt;cross@gajendra.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>delete 9P2000.u</title>
<updated>2010-12-07T18:34:11+00:00</updated>
<author>
<name>Russ Cox</name>
<email>rsc@swtch.com</email>
</author>
<published>2010-12-07T18:34:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=74dd0321756f968c595487f694fbe74ad00f0624'/>
<id>74dd0321756f968c595487f694fbe74ad00f0624</id>
<content type='text'>
thanks to Erik Quanstrom

R=rsc
http://codereview.appspot.com/3469042
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
thanks to Erik Quanstrom

R=rsc
http://codereview.appspot.com/3469042
</pre>
</div>
</content>
</entry>
<entry>
<title>lib9pclient: clear tx.extension for 9P2000.u</title>
<updated>2008-07-04T20:35:52+00:00</updated>
<author>
<name>Russ Cox</name>
<email>rsc@swtch.com</email>
</author>
<published>2008-07-04T20:35:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=06421c01b9a73b681fe7be8ded2bc7441c652be7'/>
<id>06421c01b9a73b681fe7be8ded2bc7441c652be7</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>lib9pclient: remove debugging print</title>
<updated>2008-07-04T16:36:26+00:00</updated>
<author>
<name>Russ Cox</name>
<email>rsc@swtch.com</email>
</author>
<published>2008-07-04T16:36:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=fc9fc9c83154ff0fa5a56854ee1f023c78f66fd8'/>
<id>fc9fc9c83154ff0fa5a56854ee1f023c78f66fd8</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>lib9pclient: one more dotu (Michael Kaminsky)</title>
<updated>2008-07-04T16:19:30+00:00</updated>
<author>
<name>Russ Cox</name>
<email>rsc@swtch.com</email>
</author>
<published>2008-07-04T16:19:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=07125953eaf9e81fdb498749d4ccb0305e5a5343'/>
<id>07125953eaf9e81fdb498749d4ccb0305e5a5343</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>lib9pclient: add support for 9P2000.u</title>
<updated>2008-07-04T06:46:05+00:00</updated>
<author>
<name>Russ Cox</name>
<email>rsc@swtch.com</email>
</author>
<published>2008-07-04T06:46:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=382ae73f24c4566b2948d72f65ff68dc35857556'/>
<id>382ae73f24c4566b2948d72f65ff68dc35857556</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>more functions</title>
<updated>2006-07-23T02:55:34+00:00</updated>
<author>
<name>rsc</name>
<email>devnull@localhost</email>
</author>
<published>2006-07-23T02:55:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=73a5509ae929e41ca0047254a880c8efd4aa72a1'/>
<id>73a5509ae929e41ca0047254a880c8efd4aa72a1</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>remove debug print</title>
<updated>2006-06-26T00:06:36+00:00</updated>
<author>
<name>rsc</name>
<email>devnull@localhost</email>
</author>
<published>2006-06-26T00:06:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=13a17f7503237c32fa3ead6487001c5a2b91194e'/>
<id>13a17f7503237c32fa3ead6487001c5a2b91194e</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>set errstr for bad dir contents</title>
<updated>2006-06-26T00:06:28+00:00</updated>
<author>
<name>rsc</name>
<email>devnull@localhost</email>
</author>
<published>2006-06-26T00:06:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rctt.net/plan9port/commit/?id=f53117fb6ba30e8c52a8e401c622d2ddee89fcbe'/>
<id>f53117fb6ba30e8c52a8e401c622d2ddee89fcbe</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
