summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* LibVNCClient: really fix #250Christian Beier2018-10-041-1/+1
|
* websockets: remove Flash fallbackChristian Beier2018-10-012-13/+1
| | | | Closes #162
* Update bundled noVNC to latest release 1.0.0Christian Beier2018-10-01154-9071/+78834
| | | | Closes #148
* httpd: send proper MIME type for Javascript filesChristian Beier2018-10-011-0/+2
| | | | re #148
* LibVNCClient: make sure Ultra decoding cannot dereference a null pointerChristian Beier2018-10-011-0/+4
| | | | Closes #254
* CMake: require some form of hton64() for websocketsChristian Beier2018-09-301-2/+6
| | | | Closes #127
* Fix compilaton with gcc 4.4.xDRC2018-09-301-2/+2
| | | | | | Closes #204 Signed-off-by: Christian Beier <dontmind@freeshell.org>
* LibVNCClient: fix three possible heap buffer overflowsChristian Beier2018-09-291-4/+6
| | | | | | | An attacker could feed `0xffffffff`, causing a `malloc(0)` for the buffers which are subsequently written to. Closes #247
* LibVNCClient: make sure ReadFromRFBServer() does not write after buffer end ↵Christian Beier2018-09-291-1/+1
| | | | | | in CoRRE decoding Closes #250
* LibVNCClient: fix possible infinite loopChristian Beier2018-09-291-1/+1
| | | | Closes #251
* LibVNCClient: don't leak uninitialised memory to remoteChristian Beier2018-09-291-0/+2
| | | | | | | The pad fields of the rfbClientCutTextMsg and rfbKeyEventMsg could contain arbitray memory belonging to the process, don't leak this to the remote. Closes #252
* When connecting to a repeater, only send initialised stringChristian Beier2018-09-292-4/+14
| | | | Closes #253
* CMake: build the repeater example as wellChristian Beier2018-09-291-0/+1
|
* Remove the turbojpeg.h dependency from public headersChristian Beier2018-09-272-2/+3
| | | | Closes #230
* CMake: fix build error that occured on Windows with CMake 3.12Christian Beier2018-09-271-0/+2
|
* AppVeyorCI: print CMake versionChristian Beier2018-09-271-0/+1
|
* CMake: only do jpeg-turbo tests if a libjpeg was foundChristian Beier2018-09-261-33/+35
|
* Remove .gitignore obsoleted by CMakeChristian Beier2018-09-261-87/+0
| | | | re #248
* CMake: make get_link_libraries() not crash when there are no linked ↵Christian Beier2018-08-101-1/+3
| | | | libraries at all
* SDLvncviewer: work around SDL_TEXTINPUT not generating chars with CTRL downChristian Beier2018-07-301-0/+4
|
* SDLvncviewer: handle mouse wheel eventsChristian Beier2018-07-301-1/+31
|
* SDLvncviewer: adhere to C89Christian Beier2018-07-301-1/+2
|
* SDLvncviewer: implement Unicode input handlingChristian Beier2018-07-301-20/+26
|
* TravisCI: install SDL2 dev packages for OSX as wellChristian Beier2018-07-301-0/+1
|
* TravisCI: install SDL2 dev packagesChristian Beier2018-07-301-0/+1
|
* SDLvncviewer: remove obsolete video scaling codeChristian Beier2018-07-301-129/+0
|
* SDLvncviewer: use SDL2 for clipboard handlingChristian Beier2018-07-304-614/+26
| | | | By using this, we can get rid of our own homebrewn solution scrap.[c|h] and drop X11 from the build system.
* SDLvncviewer: make input work with SDL2Christian Beier2018-07-301-22/+22
| | | | ... at least somewhat. This is far from perfect but no regression compared to SDL1.2 functionality.
* SDLvncviewer: make display work with SDL2Christian Beier2018-07-302-55/+92
|
* CMake: look for SDL2 instead of SDLChristian Beier2018-07-302-5/+178
| | | | | FindSDL2.cmake was downloaded from https://github.com/tcbrindle/sdl2-cmake-scripts/blob/master/FindSDL2.cmake
* SDLvncviewer: add a very simple GetCredentials callbackChristian Beier2018-07-251-0/+25
|
* CMake: add a LIBVNCSERVER_HAVE_GNUTLS #defineChristian Beier2018-07-082-0/+7
|
* build: decouple GnuTLS|OpenSSL detection from WebSockets supportChristian Beier2018-07-082-21/+15
|
* crypto: remove polarssl wrapperChristian Beier2018-06-291-26/+0
| | | | This is not even in the build system anymore.
* CMake: declare that websockets depend on cryptoChristian Beier2018-06-291-2/+3
|
* build: remove LIBVNCSERVER_WITH_CLIENT_TLS #defineChristian Beier2018-06-291-3/+0
| | | | It is not used anywhere anymore.
* crypto: move to commonChristian Beier2018-06-296-6/+23
| | | | | | As of now, only LibVNCServer makes uses of these digest functions _and_ they depend on sys/uio.h, but in the future LibVNCClient will need those as well.
* Merge pull request #235 from eddiejames/masterChristian Beier2018-06-262-14/+13
|\ | | | | Tight: export SendCompressedData and SendTightHeader functions
| * Tight: export SendCompressedData and SendTightHeader functionsEddie James2018-06-202-14/+13
|/ | | | | | | | | These functions can be used to send already compressed jpegs to a client, circumventing the usual rect/region update methods which operate on a raw rgb framebuffer. Rename the functions with the usual rfb prefix and add the prototypes in rfb.h. Signed-off-by: Eddie James <eajames@us.ibm.com>
* AppVeyorCI: remove unused statementsChristian Beier2018-06-161-8/+0
|
* AppVeyorCI: remove Visual Studio 2013 as it somehow got broken at AppVeyor's ↵Christian Beier2018-06-161-3/+0
| | | | side
* README: remove reference to functions not existing anymoreChristian Beier2018-06-161-3/+0
| | | | Closes #202.
* Merge pull request #215 from BastiaanOlij/fix_nozlib_compile_errorChristian Beier2018-05-141-1/+1
|\ | | | | | | | | libvncclient: zrle.c: Move undef of REALBPP down rfbproto.c which includes this file expects an undefined REALBPP after the inclusion. Do this whether or not there is zlib available.
| * Moved undef of REALBPP downBastiaan Olij2018-01-271-1/+1
| |
* | CMake: require FFMPEG version >= 3.1.0Christian Beier2018-04-271-1/+1
| | | | | | | | re #231
* | AppVeyorCI: build with Visual Studio 2017 as wellChristian Beier2018-03-242-2/+35
| |
* | rfbserver: fix a typoChristian Beier2018-03-241-1/+1
| |
* | rfbserver: get rid of inttypes.h againChristian Beier2018-03-241-4/+1
| |
* | Merge branch 'clientcuttext' of https://github.com/ppisar/libvncserver into ↵Christian Beier2018-03-241-1/+19
|\ \ | | | | | | | | | ppisar-clientcuttext
| * | Limit client cut text length to 1 MBPetr Písař2018-03-081-1/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch constrains a client cut text length to 1 MB. Otherwise a client could make server allocate 2 GB of memory and that seems to be to much to classify it as a denial of service. The limit also prevents from an integer overflow followed by copying an uninitilized memory when processing msg.cct.length value larger than SIZE_MAX or INT_MAX - sz_rfbClientCutTextMsg. This patch also corrects accepting length value of zero (malloc(0) is interpreted on differnet systems differently). CVE-2018-7225 <https://github.com/LibVNC/libvncserver/issues/218>
generated by cgit v1.2.1 (git 2.18.0) at 2024-12-25 04:47:54 +0000