Philip Withnall 0cbad67321 gwinhttpfile: Avoid arithmetic overflow when calculating a size ... The members of `URL_COMPONENTS` (`winhttp_file->url`) are `DWORD`s, i.e. 32-bit unsigned integers. Adding to and multiplying them may cause them to overflow the unsigned integer bounds, even if the result is passed to `g_memdup2()` which accepts a `gsize`. Cast the `URL_COMPONENTS` members to `gsize` first to ensure that the arithmetic is done in terms of `gsize`s rather than unsigned integers. Spotted by Sebastian Dröge. Signed-off-by: Philip Withnall <pwithnall@endlessos.org> Helps: #2319		2021-02-04 17:51:01 +00:00
..
gwin32filemonitor.c	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwin32filemonitor.h	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwin32fsmonitorutils.c	tree: Fix various typos and outdated terminology	2020-06-12 15:01:08 +01:00
gwin32fsmonitorutils.h	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwinhttpfile.c	gwinhttpfile: Avoid arithmetic overflow when calculating a size	2021-02-04 17:51:01 +00:00
gwinhttpfile.h	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwinhttpfileinputstream.c	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwinhttpfileinputstream.h	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwinhttpfileoutputstream.c	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwinhttpfileoutputstream.h	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
gwinhttpvfs.c	gwinhttpvfs: Handle g_get_prgname() returning NULL	2019-10-06 20:05:44 +02:00
gwinhttpvfs.h	gio/win32/: LGPLv2+ -> LGPLv2.1+	2017-05-29 19:53:34 +02:00
meson.build	build: Drop use of G_DISABLE_DEPRECATED from the build system	2019-05-30 10:38:45 +01:00
winhttp.h	License headers: replace current FSF address by a link to gnu.org	2017-01-04 19:12:57 +01:00