Philip Withnall f148687b02 gvariant: Limit GVariant strings to G_MAXSSIZE ...

When validating a string to see if it’s valid UTF-8, we pass a gsize to
g_utf8_validate(), which only takes a gssize. For large gsize values,
this will result in the gssize actually being negative, which will
change g_utf8_validate()’s behaviour to stop at the first nul byte. That
would allow subsequent nul bytes through the string validator, against
its documented behaviour.

Add a test case.

oss-fuzz#10319

Signed-off-by: Philip Withnall <withnall@endlessm.com>

2018-10-23 17:01:51 +13:00

..

bookmarks

tests: Add an overflow test for bookmark file dates

2018-08-06 14:07:27 +01:00

markups

gmarkup: Fix crash in error handling path for closing elements

2018-07-30 18:33:39 +01:00

.gitignore

guuid: Add UUID helper functions to GLib

2017-02-06 14:40:38 +01:00

1bit-mutex.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

4096-random-bytes

[REVERT] Bug 548612 – g_strstr_len() should use memmem when available

2008-08-28 23:03:24 +00:00

642026.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

array-test.c

tests: Expand GArray test coverage to cover all construction forms

2018-06-04 11:11:26 +01:00

asyncqueue.c

Add tests for new GAsyncQueue api

2015-06-29 08:20:26 -07:00

atomic.c

tests: Fix a -Wbad-function-cast warning in the atomic tests

2018-08-03 11:08:26 +01:00

autoptr.c

Add reference counted strings

2018-07-09 10:11:42 +01:00

base64.c

gbase64: Fix base-64 stepped encoding with small chunks

2017-03-23 15:34:11 +00:00

bitlock.c

optimise bitlocks with new atomic operations

2011-05-28 17:39:12 -04:00

bookmarkfile.c

tests: replace most g_print() with g_printerr()

2015-05-11 20:24:56 +01:00

bookmarks.xbel

Fix a typo

2010-07-10 23:56:45 -04:00

bytes.c

tests: additional test for g_bytes_new_from_bytes()

2018-01-27 11:43:38 -08:00

cache.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

charset.c

glib/gcharset: fix leaking g_get_language_names_with_category

2018-09-20 16:08:19 +02:00

checksum.c

gchecksum: add SHA-384 support

2017-02-20 12:40:26 +01:00

collate.c

Correct collation key generation on OS X

2017-03-08 22:37:29 -05:00

cond.c

tests: replace most g_print() with g_printerr()

2015-05-11 20:24:56 +01:00

convert.c

Fix various const-correctness issues

2018-04-26 15:19:17 +01:00

dataset.c

GDataSet: Add more tests

2014-10-02 14:41:01 -04:00

date.c

date test: Use g_test_skip(), not g_test_incomplete()

2018-08-02 17:57:46 +01:00

dir.c

Add some GDir tests

2010-07-05 23:43:47 -04:00

echo-script

spawn: Improve test coverage

2012-04-08 10:24:52 -04:00

echo-script.bat

glib/tests/spawn-singlethread: Improve test for Windows

2013-11-11 22:38:36 +08:00

empty

Improve test coverage

2011-02-13 23:49:19 -05:00

environment.c

glib/tests/enviroment.c: Fix running on Windows

2013-11-27 08:01:46 +08:00

error.c

gerror: Don't leak memory when overwrite warning

2013-11-10 22:40:08 +01:00

fileutils.c

Fudge glib fileutils test to pass on Windows

2018-09-18 12:45:06 +00:00

gdatetime.c

tests: Don’t use a potentially-existent timezone in a test for failure

2018-07-31 19:54:56 +01:00

gpoll.c

gio: add a simple gpoll performance test for W32

2017-08-01 12:50:08 +00:00

guuid.c

guuid: Remove support for curly braces and URN UUIDs

2017-02-06 14:40:38 +01:00

gvariant.c

gvariant: Limit GVariant strings to G_MAXSSIZE

2018-10-23 17:01:51 +13:00

gwakeuptest.c

glib/tests: Clean up inclusion of unistd.h

2013-11-04 22:52:02 +08:00

hash.c

tests: Remove assertion that unused buckets should have NULL key/value

2018-10-03 22:14:38 +02:00

hmac.c

ghmac: Add support for G_CHECKSUM_SHA384 to GHmac

2017-02-20 12:40:26 +01:00

hook.c

Add some GHookList tests

2011-10-08 19:02:06 -04:00

hostutils.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

include.c

glib/tests/include: port to gtester

2013-11-23 00:39:07 -05:00

keyfile.c

gkeyfile: remain usable after g_key_file_free()

2018-09-20 17:04:00 +01:00

keyfiletest.ini

forgotten file

2010-07-07 22:03:02 -04:00

list.c

tests: Add tests to ensure g_[s]list_sort() are stable sorts

2017-11-28 14:11:30 +00:00

logging.c

tests/logging: Don't hardcode the result of logging a pointer

2018-05-24 23:17:03 +02:00

mainloop.c

Add G_SOURCE_FUNC cast macro which suppresses -Wcast-function-type

2018-06-14 10:11:12 +01:00

Makefile.am

Merge branch 'smcv/glib-xfail'

2018-08-07 12:24:16 +01:00

mappedfile.c

glib/tests/mappedfile.c: Use temp dir instead of user runtime dir

2017-11-16 11:17:19 +00:00

markup-collect.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

markup-escape.c

Add G_GNUC_PRINTF on all functions with format strings

2013-01-13 12:32:40 -05:00

markup-parse.c

tests: Add an assertion to guard against unexpected flags

2016-08-13 10:28:24 +02:00

markup-subparser.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

markup.c

Add a test for g_markup_parse_context_get_element_stack

2014-01-01 17:59:21 -05:00

mem-overflow.c

Ignore GCC memory overflow warnings when testing overflows

2018-03-28 11:49:59 +01:00

meson.build

meson: Mark 1bit-emufutex test as slow

2018-10-19 09:20:25 +01:00

mutex.c

tests: replace most g_print() with g_printerr()

2015-05-11 20:24:56 +01:00

node.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

once.c

g_thread_new: never fail

2011-10-13 01:00:57 -04:00

option-argv0.c

gtestutils: add "options" to g_test_init(), make option-argv0 use gtester

2013-11-23 00:43:45 -05:00

option-context.c

tests: Various minor leak fixes in the GLib tests

2018-06-29 12:13:32 +01:00

overflow.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

pages.ini

Add testcase for bug 640695

2011-01-27 23:07:53 -05:00

pattern.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

private.c

tests: replace most g_print() with g_printerr()

2015-05-11 20:24:56 +01:00

protocol.c

Consistently save errno immediately after the operation setting it

2017-08-03 10:21:13 +01:00

queue.c

tests: replace most g_print() with g_printerr()

2015-05-11 20:24:56 +01:00

rand.c

Add a test for the previous fix

2011-06-03 23:38:46 -04:00

rcbox.c

Increase coverage of atomic refcounted data

2018-07-09 10:11:42 +01:00

rec-mutex.c

tests: replace most g_print() with g_printerr()

2015-05-11 20:24:56 +01:00

refcount.c

Add tests for refcount types

2018-06-11 14:59:39 +01:00

refstring.c

Drop a questionable test from the refstring suite

2018-08-02 12:21:38 +01:00

regex.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

rwlock.c

tests: replace most g_print() with g_printerr()

2015-05-11 20:24:56 +01:00

scannerapi.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

search-utils.c

Improve search utils test coverage

2013-11-28 16:01:23 -05:00

sequence.c

tests: Various minor leak fixes in the GLib tests

2018-06-29 12:13:32 +01:00

shell.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

slice.c

Drop g_slice_set_config tests

2015-09-12 11:13:45 -04:00

slist.c

tests: Add tests to ensure g_[s]list_sort() are stable sorts

2017-11-28 14:11:30 +00:00

sort.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

spawn-multithreaded.c

Add G_SPAWN_DEFAULT to GSpawnFlags

2013-08-17 13:02:25 -04:00

spawn-singlethread.c

gspawn: treat all negative fds as unset

2018-06-29 11:44:12 -05:00

strfuncs.c

tests/strfuncs: drop some redundant test code

2018-05-24 23:17:08 +02:00

string.c

gtestutils: add g_assert_cmpmem()

2015-08-31 13:59:48 -04:00

test-printf.c

Force binary mode for stdout in printf tests

2018-06-11 14:20:34 +00:00

test-spawn-echo.c

gthread: move test cases to glib/

2011-10-16 19:08:59 -04:00

testing-helper.c

testing: Exercise TAP output

2018-08-07 12:20:37 +01:00

testing.c

testing: Exercise TAP output

2018-08-07 12:20:37 +01:00

thread.c

tests: Fix error reporting on prlimit() call failure

2018-07-11 10:06:06 +02:00

timeout.c

glib/tests: Clean up inclusion of unistd.h

2013-11-04 22:52:02 +08:00

timer.c

tests/timer: Skip test_timeval_to_iso8601_overflow if we can't overflow a GTimeVal

2018-09-04 10:31:52 +01:00

tree.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

unicode.c

unicode: Update to unicode 11.0.0

2018-07-18 14:26:47 +02:00

unix.c

Replace all instances of ssize_t with gssize

2017-10-11 12:56:11 +01:00

uri.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

utf8-misc.c

gutf8: Fix length handling in g_utf8_make_valid()

2017-10-25 10:33:48 +01:00

utf8-performance.c

glib/tests/: LGPLv2+ -> LGPLv2.1+

2017-05-24 11:58:19 +02:00

utf8-pointer.c

gutf8: Clarify return value docs for g_utf8_find_next_char()

2017-06-21 11:39:52 +01:00

utf8-validate.c

gutf8: Fix documentation for g_utf8_get_char_validated() length limits

2017-06-21 11:38:46 +01:00

utils.c

gmem: Only evaluate pointer argument to g_clear_pointer() once

2018-08-22 14:47:52 +01:00