maxmustermann/godot
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
godot/core/io
History
Fabio Alessandrelli 5262d1bbcc Fix marshalls size checks. 
Yesterday, when playing around with my network code, I realized there is
a security issue in decode_variant, at least when decoding PoolArrays.
Basically, the size of the PoolArray is encoded in a uint32_t, when
decoding it, that value is cast to int when comparing if the packet is
actually that size causing numbers with MSB=1 to be interpreted as
negative thus always passing the check. That same value though, is used
as uint32_t again to resize the output vector.  For this reason, sending
a malformed packet with declared type PoolByteArray and size of 2^31(+x)
causes the engine to try to allocate 2+GB of pool memory, causing the
engine to crash.
2018-07-28 21:21:19 +02:00
..
compression.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
compression.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
config_file.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
config_file.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_buffered.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_buffered.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_buffered_fa.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_compressed.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_compressed.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_encrypted.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_encrypted.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_memory.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_memory.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_network.cpp Clean up some bad words from code comments 2018-02-22 12:22:41 +01:00
file_access_network.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_pack.cpp Fix listing files inside directory in pack file 2018-04-28 17:35:48 +02:00
file_access_pack.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_zip.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
file_access_zip.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
http_client.cpp Fix CORS problems due to added headers on JS target 2018-07-08 15:39:15 +02:00
http_client.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
image_loader.cpp fix API string path 2018-05-13 23:03:48 +02:00
image_loader.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
ip.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
ip.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
ip_address.cpp Fix typos with codespell 2018-02-22 12:17:06 +01:00
ip_address.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
json.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
json.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
logger.cpp
logger.h
marshalls.cpp Fix marshalls size checks. 2018-07-28 21:21:19 +02:00
marshalls.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
networked_multiplayer_peer.cpp Bind many more properties to scripts 2018-01-12 00:58:14 +02:00
networked_multiplayer_peer.h Bind many more properties to scripts 2018-01-12 00:58:14 +02:00
packet_peer.cpp fix set_stream_peer binding in PacketPeer 2018-01-12 14:25:05 +01:00
packet_peer.h Bind many more properties to scripts 2018-01-12 00:58:14 +02:00
packet_peer_udp.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
packet_peer_udp.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
pck_packer.cpp PCKPacker:pck_start(): Update version 2018-05-01 22:04:08 +02:00
pck_packer.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
resource_format_binary.cpp Clean up some bad words from code comments 2018-02-22 12:22:41 +01:00
resource_format_binary.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
resource_import.cpp Removed PBM bitmap loader, added abiliy to importi mages as bitmap. Fixes #14828 2018-01-06 16:38:36 -03:00
resource_import.h Removed PBM bitmap loader, added abiliy to importi mages as bitmap. Fixes #14828 2018-01-06 16:38:36 -03:00
resource_loader.cpp Dont print error when loading resource from cache 2018-01-11 20:46:18 +07:00
resource_loader.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
resource_saver.cpp fix API string path 2018-05-13 23:03:48 +02:00
resource_saver.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
SCsub
stream_peer.cpp Change function signature from float to double to match type get_doubleCloses #16160 2018-02-21 23:59:15 +01:00
stream_peer.h Change function signature from float to double to match type get_doubleCloses #16160 2018-02-21 23:59:15 +01:00
stream_peer_ssl.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
stream_peer_ssl.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
stream_peer_tcp.cpp Display set_nodelay to GDScript 2018-02-04 20:02:04 +01:00
stream_peer_tcp.h Display set_nodelay to GDScript 2018-02-04 20:02:04 +01:00
tcp_server.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
tcp_server.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
translation_loader_po.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
translation_loader_po.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
xml_parser.cpp Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
xml_parser.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00
zip_io.h Add missing copyright headers and fix formatting 2018-01-05 01:22:23 +01:00