openssh/openbsd-compat
Darren Tucker 527cb43fa1 Return ERANGE from getcwd() if buffer size is 1.
If getcwd() is supplied a buffer size of exactly 1 and a path of "/", it
could result in a nul byte being written out of array bounds.  POSIX says
it should return ERANGE if the path will not fit in the available buffer
(with terminating nul). 1 byte cannot fit any possible path with its nul,
so immediately return ERANGE in that case.

OpenSSH never uses getcwd() with this buffer size, and all current
(and even quite old) platforms that we are currently known to work
on have a native getcwd() so this code is not used on those anyway.
Reported by Qualys, ok djm@
2022-07-14 11:22:08 +10:00
..
regress Add includes.h to compat tests. 2021-08-11 09:21:09 +10:00
arc4random.c Remove unused ivbits argument from chacha_keysetup 2022-03-01 09:02:06 +11:00
base64.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
base64.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
basename.c
bcrypt_pbkdf.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
bindresvport.c Include stdlib.h for arc4random_uniform prototype. 2021-09-29 20:03:58 +10:00
blf.h sync bcrypt-related files with OpenBSD 2021-11-29 12:30:22 +11:00
blowfish.c sync bcrypt-related files with OpenBSD 2021-11-29 12:30:22 +11:00
bsd-asprintf.c Don't avoid our *sprintf replacements. 2018-10-12 16:58:47 +11:00
bsd-closefrom.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
bsd-cygwin_util.c Fix signedness bug in Cygwin code 2022-01-21 09:53:07 +11:00
bsd-cygwin_util.h Use Cygwin-specific matching only for users+groups. 2019-03-12 09:19:19 +11:00
bsd-err.c Add missing includes for bsd-err.c. 2017-08-27 08:55:40 +10:00
bsd-flock.c typo: missing ; 2018-02-26 14:39:14 +11:00
bsd-getline.c Skip getline() on HP-UX 10.x. 2021-11-06 21:09:48 +11:00
bsd-getpagesize.c Include includes.h for HAVE_GETPAGESIZE. 2017-10-31 10:09:33 +11:00
bsd-getpeereid.c
bsd-malloc.c Handle calloc(0,x) where different from malloc. 2018-02-26 00:09:04 +11:00
bsd-misc.c Add clang sanitizer tests. 2022-07-03 22:53:44 +10:00
bsd-misc.h Constify utimes in compat library to match specs. 2022-02-25 15:14:22 +11:00
bsd-nextstep.c Strip trailing whitespace. 2016-08-02 09:44:25 +10:00
bsd-nextstep.h Many typo fixes from Karsten Weiss 2018-04-10 10:19:02 +10:00
bsd-openpty.c Test if sshd accidentally acquires controlling tty 2022-02-14 14:19:40 +11:00
bsd-poll.c Only return events from ppoll that were requested. 2022-04-01 23:38:44 +11:00
bsd-poll.h Only include sys/poll.h if we don't have poll.h. 2022-02-22 12:25:52 +11:00
bsd-pselect.c Increment nfds when coming from startup_pipe. 2021-09-08 18:39:44 +10:00
bsd-setres_id.c Fix format string integer type in error message. 2019-07-19 07:23:26 +10:00
bsd-setres_id.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
bsd-signal.c Remove mysignal wrapper. 2020-01-23 18:55:24 +11:00
bsd-signal.h Include signal.h to prevent redefintion of _NSIG. 2020-01-26 14:09:17 +11:00
bsd-snprintf.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
bsd-statvfs.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
bsd-statvfs.h bsd-statvfs: include sys/vfs.h, check for f_flags. 2018-02-26 00:09:04 +11:00
bsd-waitpid.c Replace spaces with tabs. 2016-08-02 10:01:52 +10:00
bsd-waitpid.h polish whitespace for portable files 2021-04-03 17:47:37 +11:00
chacha_private.h Remove unused ivbits argument from chacha_keysetup 2022-03-01 09:02:06 +11:00
charclass.h
daemon.c
dirname.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
explicit_bzero.c Using explicit_memset for the explicit_bzero compatibility layer. 2021-02-05 17:07:03 +11:00
fake-rfc2553.c Replace spaces with tabs. 2016-08-02 10:01:52 +10:00
fake-rfc2553.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
fmt_scaled.c Resync fmt_scaled. with OpenBSD. 2022-03-11 18:43:58 +11:00
fnmatch.c sync fnmatch.c with upstream to fix another typo 2020-03-13 14:30:16 +11:00
fnmatch.h Define __BSD_VISIBLE in fnmatch.h. 2019-11-02 22:46:22 +11:00
freezero.c Include stdlib.h for declaration of free. 2018-07-11 12:14:09 +10:00
getcwd.c Return ERANGE from getcwd() if buffer size is 1. 2022-07-14 11:22:08 +10:00
getgrouplist.c Repair $OpenBSD markers. 2016-08-02 09:06:27 +10:00
getopt_long.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
getopt.h
getrrsetbyname-ldns.c
getrrsetbyname.c Improve handling of _getshort and _getlong. 2022-02-25 19:47:48 +11:00
getrrsetbyname.h
glob.c Sync rev 1.49. 2020-04-21 18:28:19 +10:00
glob.h upstream commit 2019-11-15 16:06:30 +11:00
inet_aton.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
inet_ntoa.c
inet_ntop.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
kludge-fd_set.c
libressl-api-compat.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
Makefile.in Remove duplicate bcrypt_pbkdf.o from Makefile 2022-05-09 10:58:02 +10:00
md5.c
md5.h
memmem.c Add OPENBSD ORIGINAL marker. 2021-04-24 17:52:24 +10:00
mktemp.c Remove checks for strict POSIX mkdtemp() 2020-10-27 16:50:38 +11:00
openbsd-compat.h Provide killpg implementation. 2022-03-09 09:41:56 +11:00
openssl-compat.c Reverse order of OpenSSL init functions. 2018-11-25 14:05:57 +11:00
openssl-compat.h support OpenSSL 3.x cipher IV API change 2021-02-18 12:06:25 +11:00
port-aix.c Handle GIDs > 2^31 in getgrouplist. 2021-06-17 21:03:19 +10:00
port-aix.h Constify aix_krb5_get_principal_name. 2020-02-17 22:53:24 +11:00
port-irix.c Move log.h include inside ifdefs. 2019-07-08 17:27:26 +10:00
port-irix.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
port-linux.c SELinux has deprecated security_context_t 2020-11-13 13:46:28 +11:00
port-linux.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
port-net.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
port-net.h fix rdomain compilation errors 2017-10-27 08:42:33 +11:00
port-prngd.c Fix ifdefs around get_random_bytes_prngd. 2021-07-02 15:20:32 +10:00
port-solaris.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00
port-solaris.h Remove obsolete CVS $Id from source files. 2016-08-17 14:08:42 +10:00
port-uw.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
port-uw.h
pwcache.c Cast *ID types to unsigned long when printing. 2019-07-06 13:02:34 +10:00
readpassphrase.c Move signal compat code into bsd-signal.{c,h} 2018-02-11 21:24:48 +11:00
readpassphrase.h
reallocarray.c
recallocarray.c Wrap stdint.h include in #ifdef. 2017-06-09 13:36:29 +10:00
rresvport.c
setenv.c lastenv is only used in setenv. 2021-07-27 17:45:34 +10:00
setproctitle.c Include stdio.h for vsnprintf. 2019-06-16 12:55:27 +10:00
sha1.c upstream rev 1.27: fix integer overflow. 2019-06-14 14:22:39 +10:00
sha1.h
sha2.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
sha2.h Remove sys/cdefs.h include. 2019-07-23 22:36:39 +10:00
sigact.c
sigact.h
strcasestr.c Add strcasestr to compat library. 2016-12-13 10:23:03 +11:00
strlcat.c
strlcpy.c
strmode.c
strndup.c Use includes.h instead of config.h. 2018-04-29 17:54:12 +10:00
strnlen.c Use includes.h instead of config.h. 2018-04-29 17:54:12 +10:00
strptime.c
strsep.c
strtoll.c
strtonum.c polish whitespace for portable files 2021-04-03 17:47:37 +11:00
strtoul.c
strtoull.c
sys-queue.h undef TAILQ_CONCAT and friends 2020-08-04 14:58:46 +10:00
sys-tree.h
timingsafe_bcmp.c
vis.c Move DEF_WEAK into defines.h. 2016-10-15 05:51:12 +11:00
vis.h Update vis.h and vis.c from OpenBSD. 2016-06-03 16:03:44 +10:00
xcrypt.c remove sys/param.h in -portable, after upstream 2021-12-22 09:02:50 +11:00