bughz/3proxy
1
0
Fork 0
mirror of https://github.com/3proxy/3proxy.git synced 2026-08-13 12:19:17 +08:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity
932c4e3fd9
3proxy/src
History
Vladimir Dubrovin 932c4e3fd9 Fix use-after-free on ftp:// request path in proxychild() 
ss pointed into the buf request buffer and was never updated when buf
was realloc()ed while reading request headers (both in the header loop
and in handlehdrfilterscli()). The ftp:// branch then dereferenced the
stale pointer.

Store ss as an offset into buf and recompute it before use.

Requires authenticated access to proxy or configuration with
authentication disabled.

Reported by Calif.io in collaboration with Anthropic
(ref ANT-2026-FHVKZ7VQ).
2026-08-07 16:36:51 +03:00
..
libs fix wolfSSL, switch minimal/busybox to musl+wolfssl 2026-07-31 11:27:10 +03:00
plugins Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
3proxy_crypt.c wolfSSL support added 2026-07-13 20:24:51 +03:00
3proxy.c Fix: race conditions / stack overflow on FreeBSD / minor bugs 2026-07-31 13:27:33 +03:00
3proxy.ico build rc file from res 2020-11-22 02:14:53 +03:00
3proxy.rc Copyright update 2021-07-02 11:50:33 +03:00
acl.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
auth.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
authradius.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
auto.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
base64.c Copyright update 2026-05-08 18:07:08 +03:00
common.c Fixed: maxchild dropped to 100 on config reload if not explicitly set, system-specific tuning hints added to doc 2026-08-01 10:22:03 +03:00
conf.c Fixed: maxchild dropped to 100 on config reload if not explicitly set, system-specific tuning hints added to doc 2026-08-01 10:22:03 +03:00
datatypes.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
dnspr.c Disable splice support 2026-08-01 09:38:49 +03:00
ftp.c Minor cleanups 2026-05-13 23:21:13 +03:00
ftppr.c replace recursion with loop for local redirects, fix wolfSSL build 2026-07-31 15:44:22 +03:00
hash.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
hashtables.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
imapp.c replace recursion with loop for local redirects, fix wolfSSL build 2026-07-31 15:44:22 +03:00
limiter.c Copyright update 2026-05-08 18:07:08 +03:00
log.c replace recursion with loop for local redirects, fix wolfSSL build 2026-07-31 15:44:22 +03:00
Makefile initial import to git 2014-04-08 13:03:21 +04:00
Makefile.inc Added imapp, starttls support for smtpp, pop3p, tlspr 2026-07-22 16:15:50 +03:00
mdhash.c fix wolfSSL build 2026-07-13 20:50:27 +03:00
mdhash.h wolfSSL support added 2026-07-13 20:24:51 +03:00
pcre.c Fix: pcre/ssl command handlers broken in last commits 2026-07-26 15:51:55 +03:00
pcre.h Move PCRE/SSL to main code 2026-05-01 15:11:08 +03:00
plugins.c Added imapp, starttls support for smtpp, pop3p, tlspr 2026-07-22 16:15:50 +03:00
pop3p.c replace recursion with loop for local redirects, fix wolfSSL build 2026-07-31 15:44:22 +03:00
proxy.c Fix use-after-free on ftp:// request path in proxychild() 2026-08-07 16:36:51 +03:00
proxy.h Fixed: maxchild dropped to 100 on config reload if not explicitly set, system-specific tuning hints added to doc 2026-08-01 10:22:03 +03:00
proxymain.c Fixed: maxchild dropped to 100 on config reload if not explicitly set, system-specific tuning hints added to doc 2026-08-01 10:22:03 +03:00
redirect.c Fix parent negotiation after sending PROXY protocol header 2026-07-23 10:55:07 +03:00
resolve.c Minor cleanups 2026-05-13 23:21:13 +03:00
smtpp.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
sockgetchar.c Optimize sockgetchar functions 2026-07-24 15:04:27 +03:00
sockmap.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
socks.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
sql.c NOODBC inverted to WITH_ODBC 2026-05-08 20:30:14 +03:00
ssl.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
ssl.h Move PCRE/SSL to main code 2026-05-01 15:11:08 +03:00
ssllib.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
stringtable.c Added imapp, starttls support for smtpp, pop3p, tlspr 2026-07-22 16:15:50 +03:00
structures.h Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
tcppm.c replace recursion with loop for local redirects, fix wolfSSL build 2026-07-31 15:44:22 +03:00
tlspr.c Fix deadcode / warnings / minor bugs 2026-07-31 18:55:59 +03:00
udppm.c replace recursion with loop for local redirects, fix wolfSSL build 2026-07-31 15:44:22 +03:00
udpsockmap.c Check bandlims for UDP traffic 2026-06-02 14:23:52 +03:00
version.h Commit as 0.9.7 2026-07-04 13:51:28 +03:00
webadmin.c replace recursion with loop for local redirects, fix wolfSSL build 2026-07-31 15:44:22 +03:00