Hugo Lefeuvre comments

Results 11 comments of


                                            Hugo Lefeuvre

There is a buffer overflow which can lead to dos in live555 v0.95

This was addressed in 2019.05.12, please close. http://www.live555.com/liveMedia/public/changelog.txt

There is a buffer overflow which can lead to dos in live555 v0.95

> > This was addressed in 2019.05.12, please close. > > http://www.live555.com/liveMedia/public/changelog.txt > > Could you kindly point me to the commit that fixed the issue ? > Thanks :)...

There is a memory leak in function parseAuthorizationHeader, which can cause a DoS

This bug report was rejected by upstream, please close: http://lists.live555.com/pipermail/live-devel/2019-May/021218.html

correct spelling mistake

codespell reports some more ones (lots of false positives in po/*). ``` $ codespell * ChangeLog:41: syncronization ==> synchronization ChangeLog:148: incomming ==> incoming ChangeLog:387: dependancy ==> dependency WARNING: Binary file:...

memory exhauted and hangs long time when use 64bit opj_decompress (CVE-2019-6988)

@yanxxd is this issue invalid, or was it fixed at some point? If this issue is invalid, we should ask for CVE rejection.

Python 3.7 compatible release?

I don't have any specific problem. I was just asking because the current 0.1.2 release is fairly old and does not officially support Python > 3.3. The current code in...

Python 3.7 compatible release?

@craigmaloney a PyPI release would be nice, but a GitHub release is sufficient for me to update the Debian package. Thanks for your work.

Provide (signed) release tarballs

Oh, right, I didn't see it. Yes, pypi is fine for source releases. Thanks !

Add Intel SGX support to Unikraft

Thank you so much for this PR @xymeng16! A few high-level comments and points that I (we) came to realize since we started this project: - If we take a...

memory leak in png_create_info_struct

right, there is a memory leak but the security impact is extremely low if not absent: * the memory is leaked during abort(), so in the vast majority of cases...