libwebsockets/test-server
Andy Green 151aa809a6 lws_snprintf
Thanks to Fabrice Gilot for reporting the problem that led to uncovering this.

Due to a misunderstanding of the return value of snprintf (it is not truncated according
to the max size passed in) in places relying on snprintf to truncate the length
overflows are possible.

This patch wraps snprintf with a new lws_snprintf() which does truncate its length to allow
the buffer limiting scheme to work properly.

All users should update with these fixes.

In 1.7.x, there's no affected code in the library itself, just a couple on instances in the
test app code.
2016-09-15 02:36:22 +08:00
..
.gitignore Ignoring linux build files 2013-01-09 15:46:11 +08:00
attack.sh fix %3d handling in path part and add attack.sh 2016-05-07 08:33:07 +08:00
favicon.ico refactor-into-dirs.patch 2010-11-01 09:12:17 +00:00
fuzxy.c Don't include <sys/cdefs.h> for NetBSD 2016-02-27 10:24:40 +08:00
leaf.jpg add by hand http send example 2013-02-14 23:24:07 +08:00
libwebsockets-test-server.service test server example systemd service file 2016-02-20 08:04:53 +08:00
libwebsockets.org-logo.png add libwebsockets.org logo to share 2013-01-16 10:00:39 +08:00
test-client.c client fix reaction to tls failure 2016-05-03 08:08:32 +08:00
test-echo.c license clarification and test apps CC zero 2016-02-08 08:44:21 +08:00
test-fraggle.c lws_snprintf 2016-09-15 02:36:22 +08:00
test-ping.c lws_snprintf 2016-09-15 02:36:22 +08:00
test-server-dumb-increment.c license clarification and test apps CC zero 2016-02-08 08:44:21 +08:00
test-server-echogen.c license clarification and test apps CC zero 2016-02-08 08:44:21 +08:00
test-server-http.c urldecode forbid malformed 2016-04-07 18:57:28 +08:00
test-server-libev.c Fix some typos. 2016-02-16 21:48:38 +08:00
test-server-libuv.c libuv win32 fixes 2 2016-04-05 07:31:16 +08:00
test-server-mirror.c license clarification and test apps CC zero 2016-02-08 08:44:21 +08:00
test-server-pthreads.c clang fixes 1 2016-03-15 21:24:04 +08:00
test-server-status.c lws_snprintf 2016-09-15 02:36:22 +08:00
test-server.c test server align rxbuf with permessage deflate rx buf size 2016-04-01 09:30:09 +08:00
test-server.h test server add lws_status 2016-02-21 13:44:07 +08:00
test.html test server align rxbuf with permessage deflate rx buf size 2016-04-01 09:30:09 +08:00