monzero-core.git/contrib/epee, branch v0.16.0.3Monzero core node, command-line wallet, consensus code, and release tooling.
https://code.monzero.org/monzero-core.git/atom?h=v0.16.0.32020-08-02T00:23:13Zepee: further defending against exceptions in command handlers2020-08-02T00:23:13Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-08-02T00:21:20Zurn:sha1:03254742e55f44b70e6c13f4bf380b0ddb3d0133epee: guard against exceptions in RPC handlers2020-07-30T22:51:56Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-07-06T15:49:02Zurn:sha1:c02d7621a49d916759eb9acab79f7c52fc8e5157epee: fix array underflow in unicode parsing2020-06-21T18:23:03Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-04-23T14:39:54Zurn:sha1:8eaf0e189fdd9ae5d338a38e4fec9cdc743f0952
Reported by minerscan
Also independently found by OSS-Fuzz just recently
rpc: don't display invalid json errors on default log level2020-06-11T12:43:13Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-04-28T14:05:41Zurn:sha1:5285ecc3d6ab39efd02d581a43ace33a58a73eb9
It's not something the user needs to know, and will display
attacker controlled data
ByteSlice: Fix persisting ptr to std::moved SSO buffer2020-05-20T00:21:21ZDoyledoylet@protonmail.com2020-05-19T08:45:32Zurn:sha1:438b84690e818b136b84f31a12e67a83fec8979b
The Bug:
1. Construct `byte_slice.portion_` with `epee::span(buffer)` which copies a pointer to the SSO buffer to `byte_slice.portion_`
2. It constructs `byte_slice.storage_` with `std::move(buffer)` (normally this swap pointers, but SSO means a memcpy and clear on the original SSO buffer)
3. `slice.data()` returns a pointer from `slice.portion_` that points to the original SSO cleared buffer, `slice.storage_` has the actual string.
Merge pull request #65402020-05-19T22:13:24Zluigi1111luigi1111w@gmail.com2020-05-19T22:13:24Zurn:sha1:f8642bf95cc9ae3e83f48ccc4bb20ded74d37966
7209db8 epee: use memwipe rather than memset for md5 secrets (moneromooo-monero)
Merge pull request #65322020-05-19T22:11:05Zluigi1111luigi1111w@gmail.com2020-05-19T22:11:05Zurn:sha1:da04c5fb48c12bfbc5c6e54c027ad1faaf9dae25
f35ced6 build: fix boost 1.73 compatibility (selsta)
epee: use memwipe rather than memset for md5 secrets2020-05-16T18:14:58Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-05-16T18:12:55Zurn:sha1:7209db839cbbb0c1e22581d30b8f87d0de557322
That's used by HTTP auth now
build: fix boost 1.73 compatibility2020-05-14T20:57:53Zselstaselsta@sent.at2020-05-14T20:57:53Zurn:sha1:f35ced6d7f00282091a9623bad573132f42a91b0Fixed bugs for take_slice and byte_stream->byte_slice2020-05-12T23:07:41ZLee Clagettcode@leeclagett.com2020-05-12T05:26:37Zurn:sha1:cc40ce1b3ffca5a48daaf6e35cdca596be5f3820