Magic-Mirror/radare2
1
0
Fork 0
mirror of https://github.com/radareorg/radare2.git synced 2024-12-14 00:38:55 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity
4,131 Commits 37 Branches 118 Tags 307 MiB
008af29003
Commit Graph

16 Commits

Author SHA1 Message Date
Jann Horn
d0fb7bb687 Fix r_sandbox_check_path – there were ways to perform directory traversal. 
- The function failed to catch the case that the path ends with "..",
   allowing the contents of the directory one path component above the
   cwd to be listed. This is probably not very interesting.
 - The function did not check for ".." components in the path if it
   starts with R2_WWWROOT, leading to full directory traversal (example:
   /usr/local/share/radare2/0.9.8.git/www/../../../../../../etc/passwd
 - Use strncmp instead of memcmp
 - Handle relative webroot paths properly
 - Check for empty R2_WWWROOT
 2014-03-27 00:32:43 +01:00
pancake
aeb681ea33 Fix #503 - expand home and fix sandbox check for 'wt' 2014-01-04 12:39:12 +01:00
pancake
da33633680 Fix #491 - Project untrusted input 
- Fix various project related issues
- Do not save in directories. Projects are file + file.d/
- Do not show division by zero issue (e cfg.foo=/bin/ls)
 2013-12-28 02:34:15 +01:00
pancake
f76441b7e7 Fix some warnings 2013-12-09 04:56:13 +01:00
pancake
904751ce86 Fix some startup valgrind warnings 2013-11-25 00:45:18 +01:00
pancake
d100e603c9 Fix #157 - sandbox issue in webui 
- add 'f' and ':' print formats
- fix nocolor disasm artifact
- add VW command to launch webui
- rename sN to sp (seek to previous hit)
 2013-10-09 00:29:49 +02:00
pancake
5372d0acb2 Add 'woR' and 'dd-' commands. Update enyo and add missing PNGs. 2013-09-15 02:24:23 +02:00
pancake
209ac5696c Fix '$' alias command (thanks alxchk for reporting) 2013-07-13 01:13:23 +02:00
pancake
8afdf330ae List and remove projects using '-p' and '-p -$prj' 2013-04-18 09:39:37 +02:00
pancake
dacede5ae9 Initial port of io-mmap to w32 2013-03-12 13:24:48 +01:00
pancake
701a43fc23 Use r_sandbox_kill instead of kill 2013-03-02 19:44:10 +01:00
pancake
9b1df62609 Fix mmap and other minor issues on w32 2013-01-23 18:38:08 +01:00
pancake
d82c53224f Fix w32 build 2013-01-23 14:50:50 +01:00
pancake
2134da8d08 Fix http.sandbox, Fix segfault in rnum, update lungo 2012-12-03 04:28:05 +01:00
pancake
858c65f239 Add sandbox-kill and disable reopen in sandbox mode 2012-10-22 10:43:10 +02:00
pancake
e48b9b2f30 Add cfg.sandbox functionality 
f.example: $ r2 -c=H -e cfg.sandbox=true -
 2012-10-20 00:31:18 +02:00