0
0
mirror of https://github.com/nodejs/node.git synced 2024-12-01 16:10:02 +01:00
nodejs/deps/cares
Daniel Stenberg 68c4c71f7f ares_create_query: avoid single-byte buffer overwrite
Incorrect string length calculation when passing escaped dot.

- CVE: CVE-2016-5180
- Upstream bug: https://c-ares.haxx.se/adv_20160929.html

PR-URL: https://github.com/nodejs/node/pull/8849
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Johan Bergström <bugs@bergstroem.nu>
Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
2016-10-02 20:40:48 -03:00
..
build Add c-ares dependency 2012-08-07 01:49:02 +02:00
config build: Updates to enable AIX support 2015-09-15 13:17:28 -04:00
include deps: sync with upstream c-ares/c-ares@4ef6817 2016-02-11 22:23:48 -05:00
src ares_create_query: avoid single-byte buffer overwrite 2016-10-02 20:40:48 -03:00
.gitignore deps: upgrade c-ares to piscisaureus/cares@805d153 2013-07-06 22:20:29 +02:00
android-configure deps: upgrade c-ares to piscisaureus/cares@805d153 2013-07-06 22:20:29 +02:00
build.mk deps: upgrade c-ares to piscisaureus/cares@805d153 2013-07-06 22:20:29 +02:00
cares.gyp build: fix dependency on missing header file 2016-08-03 11:12:53 +02:00
common.gypi build: Updates to enable AIX support 2015-09-15 13:17:28 -04:00
gyp_cares deps: upgrade c-ares to piscisaureus/cares@805d153 2013-07-06 22:20:29 +02:00
Makefile deps: upgrade c-ares to 1.10.0 2013-05-14 02:07:35 +02:00