monzero-core.git/contrib, branch v0.16.0.1Monzero core node, command-line wallet, consensus code, and release tooling.
https://code.monzero.org/monzero-core.git/atom?h=v0.16.0.12020-06-23T18:57:23ZMerge pull request #66722020-06-23T18:57:23Zluigi1111luigi1111w@gmail.com2020-06-23T18:57:23Zurn:sha1:a498a1b4ce432941dee47d74c7e05bf87acd3ad6
fa199f2 build: prepare v0.16.0.1 release (selsta)
epee: fix array underflow in unicode parsing2020-06-21T18:23:03Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-04-23T14:39:54Zurn:sha1:8eaf0e189fdd9ae5d338a38e4fec9cdc743f0952
Reported by minerscan
Also independently found by OSS-Fuzz just recently
build: prepare v0.16.0.1 release2020-06-21T14:41:46Zselstaselsta@sent.at2020-06-21T14:41:46Zurn:sha1:fa199f20af295a89bc232f67ef6a8779ef458362rpc: don't display invalid json errors on default log level2020-06-11T12:43:13Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-04-28T14:05:41Zurn:sha1:5285ecc3d6ab39efd02d581a43ace33a58a73eb9
It's not something the user needs to know, and will display
attacker controlled data
ByteSlice: Fix persisting ptr to std::moved SSO buffer2020-05-20T00:21:21ZDoyledoylet@protonmail.com2020-05-19T08:45:32Zurn:sha1:438b84690e818b136b84f31a12e67a83fec8979b
The Bug:
1. Construct `byte_slice.portion_` with `epee::span(buffer)` which copies a pointer to the SSO buffer to `byte_slice.portion_`
2. It constructs `byte_slice.storage_` with `std::move(buffer)` (normally this swap pointers, but SSO means a memcpy and clear on the original SSO buffer)
3. `slice.data()` returns a pointer from `slice.portion_` that points to the original SSO cleared buffer, `slice.storage_` has the actual string.
Merge pull request #65402020-05-19T22:13:24Zluigi1111luigi1111w@gmail.com2020-05-19T22:13:24Zurn:sha1:f8642bf95cc9ae3e83f48ccc4bb20ded74d37966
7209db8 epee: use memwipe rather than memset for md5 secrets (moneromooo-monero)
Merge pull request #65322020-05-19T22:11:05Zluigi1111luigi1111w@gmail.com2020-05-19T22:11:05Zurn:sha1:da04c5fb48c12bfbc5c6e54c027ad1faaf9dae25
f35ced6 build: fix boost 1.73 compatibility (selsta)
epee: use memwipe rather than memset for md5 secrets2020-05-16T18:14:58Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2020-05-16T18:12:55Zurn:sha1:7209db839cbbb0c1e22581d30b8f87d0de557322
That's used by HTTP auth now
Merge pull request #65242020-05-14T21:10:59Zluigi1111luigi1111w@gmail.com2020-05-14T21:10:59Zurn:sha1:a67a9fc9c4d4a1f896493031308093eb0ec6c9ac
cc40ce1 Fixed bugs for take_slice and byte_stream->byte_slice (vtnerd)
build: fix boost 1.73 compatibility2020-05-14T20:57:53Zselstaselsta@sent.at2020-05-14T20:57:53Zurn:sha1:f35ced6d7f00282091a9623bad573132f42a91b0