monzero-core.git/contrib/epee, branch v0.16.0.1Monzero core node, command-line wallet, consensus code, and release tooling.
https://code.monzero.org/monzero-core.git/atom?h=v0.16.0.12020-06-21T18:23:03Zepee: fix array underflow in unicode parsing2020-06-21T18:23:03Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-04-23T14:39:54Zurn:sha1:8eaf0e189fdd9ae5d338a38e4fec9cdc743f0952
Reported by minerscan
Also independently found by OSS-Fuzz just recently
rpc: don't display invalid json errors on default log level2020-06-11T12:43:13Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-04-28T14:05:41Zurn:sha1:5285ecc3d6ab39efd02d581a43ace33a58a73eb9
It's not something the user needs to know, and will display
attacker controlled data
ByteSlice: Fix persisting ptr to std::moved SSO buffer2020-05-20T00:21:21ZDoyledoylet@protonmail.com2020-05-19T08:45:32Zurn:sha1:438b84690e818b136b84f31a12e67a83fec8979b
The Bug:
1. Construct `byte_slice.portion_` with `epee::span(buffer)` which copies a pointer to the SSO buffer to `byte_slice.portion_`
2. It constructs `byte_slice.storage_` with `std::move(buffer)` (normally this swap pointers, but SSO means a memcpy and clear on the original SSO buffer)
3. `slice.data()` returns a pointer from `slice.portion_` that points to the original SSO cleared buffer, `slice.storage_` has the actual string.
Merge pull request #65402020-05-19T22:13:24Zluigi1111luigi1111w@gmail.com2020-05-19T22:13:24Zurn:sha1:f8642bf95cc9ae3e83f48ccc4bb20ded74d37966
7209db8 epee: use memwipe rather than memset for md5 secrets (moneromooo-monero)
Merge pull request #65322020-05-19T22:11:05Zluigi1111luigi1111w@gmail.com2020-05-19T22:11:05Zurn:sha1:da04c5fb48c12bfbc5c6e54c027ad1faaf9dae25
f35ced6 build: fix boost 1.73 compatibility (selsta)
epee: use memwipe rather than memset for md5 secrets2020-05-16T18:14:58Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-05-16T18:12:55Zurn:sha1:7209db839cbbb0c1e22581d30b8f87d0de557322
That's used by HTTP auth now
build: fix boost 1.73 compatibility2020-05-14T20:57:53Zselstaselsta@sent.at2020-05-14T20:57:53Zurn:sha1:f35ced6d7f00282091a9623bad573132f42a91b0Fixed bugs for take_slice and byte_stream->byte_slice2020-05-12T23:07:41ZLee Clagettcode@leeclagett.com2020-05-12T05:26:37Zurn:sha1:cc40ce1b3ffca5a48daaf6e35cdca596be5f3820Add byte_stream for zero-copy serialization, and add support in ZMQ-JSON.2020-04-11T04:12:11ZLee Clagettcode@leeclagett.com2020-03-18T23:22:39Zurn:sha1:c26c93019a52dee52ee865f4f1b23e6929968258Merge pull request #64462020-05-01T20:32:52Zluigi1111luigi1111w@gmail.com2020-05-01T20:32:52Zurn:sha1:c9b800a787cf2eba8803ddd03020e36d21c278b7
e509ede trezor: adapt to new passphrase mechanism (ph4r05)