apt/apt-pkg/contrib/strutl.cc, branch 2.9.1Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.12024-02-20T12:49:04ZModernize standard library includes2024-02-20T12:49:04ZJulian Andres Klodejulian.klode@canonical.com2024-02-20T12:43:08Zurn:sha1:40a75722c43ae24cb9a99d6730a3b25b65819c49
This was automated with sed and git-clang-format, and then I had to
fix up the top of policy.cc by hand as git-clang-format accidentally
indented it by two spaces.
Address statements of public domain2023-03-06T09:57:55ZJulian Andres Klodejulian.klode@canonical.com2023-02-27T16:58:33Zurn:sha1:d9039b2409e69e651bf0d7ba582dbf528086332dReplace PrintStatus with SendMessage usage2021-02-04T10:00:00ZDavid Kalnischkiesdavid@kalnischkies.de2020-06-28T18:52:09Zurn:sha1:96dc40b19623621a9cc2c5541fb3adbbceb553b1
varg API is a nightmare as the symbols seems different on ever other
arch, but more importantly SendMessage does a few checks on the content
of the message and it is all outputted via C++ iostreams and not mixed
in FILE* which is handy for overriding the streams.
Forbid negative values in unsigned StrToNum explicitly2021-02-03T16:36:46ZDavid Kalnischkiesdavid@kalnischkies.de2020-05-13T07:07:19Zurn:sha1:e0743a85c5f5f2f83d91c305450e8ba192194cd8
strtoul(l) surprises us with parsing negative values which should not
exist in the places we use to parse them, so we can just downright
refuse them rather than trying to work with them by having them promoted
to huge positive values.
Remove Word size limit from ParseQuote and CWord2021-02-03T16:36:45ZDavid Kalnischkiesdavid@kalnischkies.de2020-12-03T10:12:45Zurn:sha1:6630c3e5b6af77205b043208ef15720cf270075c
It isn't super likely that we will encounter such big words in the real
world, but we can return arbitrary length, so lets just do that as that
also means we don't have to work with a second buffer.
Don't parse \x and \0 past the end in DeEscapeString2021-02-03T16:36:45ZDavid Kalnischkiesdavid@kalnischkies.de2020-12-03T09:44:27Zurn:sha1:ed192f410da36aedf5e54bb3f967e6613ab4bb51
This has no attack surface though as the loop is to end very soon anyhow
and the method only used while reading CD-ROM mountpoints which seems
like a very unlikely attack vector…
Fix incorrect base64 encoding due to int promotion2021-02-03T16:36:45ZDavid Kalnischkiesdavid@kalnischkies.de2020-12-03T09:41:43Zurn:sha1:10f13938bbf1474451fadcd62e1c31c4b5f5b3d7
For \xff and friends with the highest bit set and hence being a negative
value on signed char systems the wrong encoding is produced as we run
into undefined behaviour accessing negative array indexes.
We can avoid this problem simply by using an unsigned data type.
Replace whitelist/blacklist with allowlist/denylist2020-08-04T10:12:11ZJulian Andres Klodejulian.klode@canonical.com2020-07-14T14:34:20Zurn:sha1:7d8bb855487d6821b0cd6bf5d2270ed8fda3d1a3Fix various compiler warnings2020-02-26T17:59:31ZJulian Andres Klodejulian.klode@canonical.com2020-02-26T17:26:13Zurn:sha1:d36b06d7eb300ca5cbee22b4fcedaefc80585da1strutl: Add APT::String::DisplayLength() function2019-11-25T16:02:47ZАлексей Шилинrootlexx@mail.ru2019-11-22T21:56:46Zurn:sha1:6ad35af2b63b32f9070c622b69da1c05535086a0
Returns string length, but unlike std::string::size() it honors
multibyte characters. This allows to properly calculate visible
sizes of console messages.