Commit Graph

  • 77286a2e03 * src/version.h: Add header guard Tim Rühsen 2018-05-08 10:10:44 +02:00
  • 7eff94e881 * src/host.c (wait_ares): Remove void assignment Tim Rühsen 2018-05-08 09:36:45 +02:00
  • 15a39093b8 Update NEWS file for new release v1.19.5 Tim Rühsen 2018-05-06 18:38:29 +02:00
  • 1fc9c95ec1 Fix cookie injection (CVE-2018-0494) Tim Rühsen 2018-04-27 10:41:56 +02:00
  • f51936745a * tests/Test-https-weboftrust.px: Skip test, needs cert regen Tim Rühsen 2018-05-06 18:19:50 +02:00
  • 491c6914cb Fix make syntax-check Tim Rühsen 2018-05-06 17:44:33 +02:00
  • a6452061f8 Fix HTTPS tests Tim Rühsen 2018-05-06 17:30:36 +02:00
  • 77cf701416 * src/init.c: Bring new --ciphers into right order in options array Tim Rühsen 2018-05-06 12:49:46 +02:00
  • c4eb863299 * doc/wget.texi: Add description for --ciphers Ander Juaristi 2018-05-03 13:45:01 +02:00
  • b9c4cadd84 OpenSSL: Better seeding of PRNG Ander Juarist 2018-04-28 20:07:46 +02:00
  • 744671aac6 Enhance SSL/TLS security Ander Juaristi 2018-04-28 14:06:34 +02:00
  • 26a50942d8 * src/netrc.c (parse_netrc_fp): Fix two memleaks Tim Rühsen 2018-04-28 20:50:30 +02:00
  • a1c9018797 Add new fuzzer for the .netrc parser Tim Rühsen 2018-04-28 20:03:18 +02:00
  • 734d0aee15 * src/utils.c (match_tail): Fix unsigned integer overflow Tim Rühsen 2018-04-27 12:06:42 +02:00
  • 7de006bade Add new fuzzer for the Set-Cookie parser Tim Rühsen 2018-04-27 12:03:56 +02:00
  • 78838d761f Fix buffer overflow in CSS parser Tim Rühsen 2018-04-26 22:40:11 +02:00
  • cb47f3aaa4 Fix buffer overflow in CSS parser Tim Rühsen 2018-04-26 21:25:02 +02:00
  • acfd9b4d56 Exclude fuzz corpora from tarball Tim Rühsen 2018-04-26 16:17:49 +02:00
  • ceb5d2d794 * tests/Makefile.am: Add -I/src to AM_CPPFLAGS Tim Rühsen 2018-04-26 16:17:10 +02:00
  • 939dbb0ebb Add CSS slowness reproducer (fixed) Tim Rühsen 2018-04-26 16:07:29 +02:00
  • caa08d7470 Update CSS grammar from 1.x to 2.2 Tim Rühsen 2018-04-26 11:58:01 +02:00
  • 76fb1fe6f6 * src/res.c (add_path): Fix memleak (parsing robots.txt) Tim Rühsen 2018-04-25 11:33:38 +02:00
  • fe6d1247ad * src/ftp-ls.c (ftp_parse_winnt_ls): Fix integer overflow Tim Rühsen 2018-04-25 09:35:35 +02:00
  • 02325168ca Add new fuzzer for the URL parser Tim Rühsen 2018-04-23 23:03:43 +02:00
  • 93e5a97f25 Add new fuzzer for robots.txt parsing Tim Rühsen 2018-04-24 11:47:49 +02:00
  • 36482a21ea * fuzz/README.md: Add CFLAGS for undefined sanitizer Tim Rühsen 2018-04-24 11:30:06 +02:00
  • 7ee3ad1c48 * src/ftp-ls.c (ftp_parse_winnt_ls): Fix integer overflow Tim Rühsen 2018-04-24 11:11:47 +02:00
  • 79c1f333dc * src/ftp-ls.c (ftp_parse_vms_ls): Fix integer overflow by left shift Tim Rühsen 2018-04-24 11:05:52 +02:00
  • d8365b0607 * src/ftp-ls.c (ftp_parse_unix_ls): Fix integer overflow in date parsing Tim Rühsen 2018-04-24 10:55:29 +02:00
  • b0f802c46c * src/ftp-ls.c (ftp_parse_winnt_ls): Fix heap-buffer-overflow Tim Rühsen 2018-04-22 12:45:43 +02:00
  • 96c64a859d * src/ftp-ls.c (ftp_parse_winnt_ls): Fix heap-buffer-overflow Tim Rühsen 2018-04-22 11:33:13 +02:00
  • 2269cc2f1b * fuzz/wget_ftpls_fuzzer.in: Update corpora Tim Rühsen 2018-04-22 00:29:47 +02:00
  • 7d3da08537 * src/ftp-ls.c (eat_carets): Fix heap-buffer-overflow Tim Rühsen 2018-04-21 23:48:01 +02:00
  • 2b61c46183 * src/ftp-ls.c (ftp_parse_winnt_ls): Fix memleak Tim Rühsen 2018-04-21 22:50:32 +02:00
  • f0d715b264 * src/ftp-ls.c (ftp_parse_vms_ls): Fix heap-buffer-overflow Tim Rühsen 2018-04-21 22:47:17 +02:00
  • b3ff8ce3d5 * src/ftp-ls.c (ftp_parse_vms_ls): Fix heap-buffer-overflow Tim Rühsen 2018-04-21 22:45:03 +02:00
  • c7014fbaea * src/ftp-ls.c (ftp_parse_vms_ls): Fix memleak Tim Rühsen 2018-04-21 22:42:30 +02:00
  • 407cd5f23b Add new fuzzer for the FTP listing parsers Tim Rühsen 2018-04-21 19:24:18 +02:00
  • fbc5f3736e * fuzz/run-clang.sh: Remove -detect_leaks=0 from fuzzer command line Tim Rühsen 2018-04-21 18:22:37 +02:00
  • 7ecfe3ef70 * src/main.c (main): Fix memleak for fuzzing/testing Tim Rühsen 2018-04-21 18:21:52 +02:00
  • 7e635d173e * src/init.c: Fix fuzzing in case ~/.wgetrc doesn't exist Tim Rühsen 2018-04-21 16:33:45 +02:00
  • e83dd5b0aa Fix fuzzer build for C++ Tim Rühsen 2018-04-20 23:59:42 +02:00
  • 0b02993e39 * fuzz/Makefile.am: Add -I/lib to oss-fuzz builds Tim Rühsen 2018-04-20 23:28:12 +02:00
  • 23b0275feb Add new HTML parser fuzzer Tim Rühsen 2018-04-20 22:18:25 +02:00
  • 77c31d301b * fuzz/wget_css_fuzzer.c: Fix build Tim Rühsen 2018-04-20 20:06:50 +02:00
  • 30bd99f3f5 * fuzz/wget_css_fuzzer.in/*: Update fuzzer corpora Tim Rühsen 2018-04-20 20:04:14 +02:00
  • c9a091ae45 * src/css-url.c (get_uri_string): Fix buffer overflow (read) Tim Rühsen 2018-04-20 11:37:52 +02:00
  • 7a5db30b01 * src/iri.h: Fix C++ compile error Tim Rühsen 2018-04-20 10:17:55 +02:00
  • 9d899d7bb7 * src/http.c: Download and scan CSS files in spider mode Tim Rühsen 2018-04-19 20:01:02 +02:00
  • d25d036fba * src/css-url.c (get_urls_css): Call yylex_destroy() to reset CSS scanner Tim Rühsen 2018-04-19 19:59:40 +02:00
  • c1a368af89 Add new fuzzer wget_css_fuzzer.c Tim Rühsen 2018-04-18 20:41:49 +02:00
  • ff3c7733b7 * src/html-url.h: Include needed header files Tim Rühsen 2018-04-18 20:41:08 +02:00
  • cc7f15a529 * wget_options_fuzzer.in/*: Update fuzzer corpora Tim Rühsen 2018-04-18 16:46:44 +02:00
  • ae6390e6a4 * fuzz/README.md: Add CXXFLAGS and more configure options Tim Rühsen 2018-04-18 16:43:51 +02:00
  • 3ae58dae13 Fix oss-fuzz issue with exit() Tim Rühsen 2018-04-18 11:17:25 +02:00
  • bb03572c2a * fuzz/wget_options_fuzzer.c: Declare fopen_* as C functions Tim Rühsen 2018-04-17 23:35:42 +02:00
  • 66b416b6cd Fix fopen/stdin issues with fuzzing Tim Rühsen 2018-04-17 23:01:59 +02:00
  • fdd86aada9 * configure.ac: AC_DEFINE FUZZING if --enable-fuzzing was given Tim Rühsen 2018-04-17 15:55:58 +02:00
  • ce90ed78b6 * fuzz/wget_options_fuzzer.c: Write fuzzer crash reports Tim Rühsen 2018-04-17 12:41:34 +02:00
  • 3c4a6506a5 * src/log.c: Don't check_redirect_output() when fuzzing Tim Rühsen 2018-04-17 12:40:47 +02:00
  • fbb4cd231e * src/main.c (promt_for_password): Avoid getpass() when fuzzing Tim Rühsen 2018-04-17 12:15:18 +02:00
  • 3ceb6e5630 Fix double fclose() with -d while fuzzing Tim Rühsen 2018-04-17 11:59:46 +02:00
  • eaf167aaaa * src/main.c (main): Don't background if TESTING Tim Rühsen 2018-04-17 11:44:06 +02:00
  • 7d5de64fc9 * src/init.c (initialize): Return error, don't exit() Tim Rühsen 2018-04-17 11:41:41 +02:00
  • 70042265be * src/init.c (cmd_use_askpass): Return false on error Tim Rühsen 2018-04-16 23:04:53 +02:00
  • 64758655c4 * src/utils.c (compile_posix_regex): Hard-code string to regcomp Tim Rühsen 2018-04-16 22:04:50 +02:00
  • e737c4b10e Fix 2 more memleaks Tim Rühsen 2018-04-16 22:02:03 +02:00
  • 05a8c064e9 * src/init.c (cleanup): Set output_stream to NULL after closing Tim Rühsen 2018-04-16 13:22:29 +02:00
  • 01002a168a Fix homedir memory leaks Tim Rühsen 2018-04-16 13:18:47 +02:00
  • 73fd57585c * src/main.c (main): Free opt.encoding_remote properly Tim Rühsen 2018-04-16 12:21:52 +02:00
  • 7963260e76 * src/host.c (wait_ares): Free ptimer Tim Rühsen 2018-04-16 11:58:18 +02:00
  • 99a7039def * src/init.c (cleanup): Free regex objects properly Tim Rühsen 2018-04-16 11:57:39 +02:00
  • d7e3acb2cc * src/init.c (cleanup): Never call cleanup() twice Tim Rühsen 2018-04-15 22:05:34 +02:00
  • e0860dd1ff * src/init.c (cmd_bytes_sum): Fix integer over- and underflow Tim Rühsen 2018-04-15 22:04:16 +02:00
  • 15ef79f808 * src/main.c (save_hsts): Free hsts_store after closing Tim Rühsen 2018-04-15 22:03:27 +02:00
  • 79385a29fd Use strtol() instead of selfmade function Tim Rühsen 2018-04-15 19:00:32 +02:00
  • 55da9f71f0 * src/hsts.c (hsts_hash_func): Allow integer overflow Tim Rühsen 2018-04-15 18:57:24 +02:00
  • bec9816f40 * init.c (cmd_spec_mirror): Fix uninitialzed stack variable Tim Rühsen 2018-04-15 13:44:37 +02:00
  • b86294e1c9 * src/init.c (cleanup): Free more variables Tim Rühsen 2018-04-15 13:43:37 +02:00
  • 7e1e5f3959 * wget_options_fuzzer.in: Add corpora directory Tim Rühsen 2018-04-14 12:37:21 +02:00
  • 4a6336d551 * fuzz/wget_options_fuzzer.c: Suppress error messages from wget Tim Rühsen 2018-04-12 22:08:03 +02:00
  • 328438e69b * src/utils.c (fopen_stat): Early return to allow fuzzing/fmemopen Tim Rühsen 2018-04-06 16:52:29 +02:00
  • 36f029d2f0 * src/init.c (initialize): Free mem before exit() Tim Rühsen 2018-04-06 16:51:27 +02:00
  • a4402120ad Add OSS-Fuzz infrastruture Tim Rühsen 2018-02-09 08:00:07 +01:00
  • de54c970b2 Move unit-test code to tests/ Tim Rühsen 2018-02-09 12:42:19 +01:00
  • 3e84963e84 * src/main.c: Rename main() -> main_wget() for unit tests Tim Rühsen 2018-02-09 11:23:44 +01:00
  • f56f970bc2 Fix some issues found by 'infer' Tim Rühsen 2018-03-14 14:43:35 +01:00
  • 0b54043d17 * src/openssl.c: Fix build for OpenSSL 1.1.0 without TLS1_3_VERSION Tim Rühsen 2018-03-08 16:17:14 +01:00
  • 040106b3e2 Add docs for --secure-protocol=TLSv1_3 Tim Rühsen 2018-03-08 15:30:28 +01:00
  • fde8cefd13 Add TLS1.3 support for OpenSSL build Loganaden Velvindron 2018-03-08 15:07:36 +01:00
  • ba2b0654b4 * src/main.c: Add help text for --retry-on-http-error Tim Rühsen 2018-03-07 10:31:30 +01:00
  • 375bfa98dc * src/url.c (convert_fname): Fix invalid free on iconv_open() failure Tim Rühsen 2018-03-01 16:03:25 +01:00
  • bea54e0da4 * src/mswindows.c: Fix prototype of fork_to_background() Tim Rühsen 2018-02-21 19:05:10 +01:00
  • 98ec26cc6d Fix warning to not print binary IP address Tim Rühsen 2018-02-09 10:33:01 +01:00
  • 9887b870d1 Use gnulib's utime() Tim Rühsen 2018-02-08 21:31:37 +01:00
  • c722973212 Fix logging in background mode Tim Rühsen 2018-02-07 22:33:06 +01:00
  • bb7fa977a1 * src/http.c: Fix two typos in comments Tim Rühsen 2018-02-09 10:18:35 +01:00
  • f2d6075a6e * testenv/conf/expected_files.py: Ignore pubring.gpg Tim Rühsen 2018-01-31 09:04:37 +01:00
  • 0caed28cda * bootstrap.conf: Replace gnulib module gettext by gettext-h Tim Rühsen 2018-01-31 09:01:54 +01:00
  • d27032c446 Mention list and bugtracker for --help and in man page Tim Rühsen 2018-01-22 10:39:43 +01:00