Headline
CVE-2020-11521: Commits · FreeRDP/FreeRDP
libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
Commits on Apr 26, 2022
Commits on Apr 25, 2022
Commits on Apr 23, 2022
Commits on Apr 22, 2022
Commits on Apr 21, 2022
Commits on Apr 20, 2022
Commits on Apr 19, 2022
Logging and parser fixes (#7796)
* Fixed remdesk settings pointer
* Fixed sign warnings in display_write_monitor_layout_pdu
* Use freerdp_abort_connect_context and freerdp_shall_disconnect_context
* Added and updates settings
* info assert/dynamic timezone
* mcs assert/log/flags
* Fixed and added assertions for wStream
* Unified stream length checks
* Added new function to check for lenght and log * Replace all usages with this new function
* Cleaned up PER, added parser logging
* Cleaned up BER, added parser logging
* log messages
* Modified Stream_CheckAndLogRequiredLengthEx
* Allow custom format and options * Add Stream_CheckAndLogRequiredLengthExVa for prepared va_list
* Improved Stream_CheckAndLogRequiredLength
* Now have log level adjustable * Added function equivalents for existing logger * Added a backtrace in case of a failure is detected
* Fixed public API input checks
Commits on Apr 15, 2022
Commits on Apr 13, 2022
Fix #7793: Do not expose internal input API (#7794)
* Fixed GetFileInformationByHandle initializers
* Fix #7793: Do not expose internal input API
Slow-Path input uses UINT16 for scancodes on wire, but only the lower byte is actually used. (the extended fields are sent in keyboardFlags field) Hide this implementation detail and adjust the API to use UINT8 for the code instead just like the corresponding Fast-Path PDU
* Added a warning for problematic slow path keyCodes
Commits on Apr 12, 2022
proxy: correctly use the RemoteApp flag
The flag was forcing the remoteApp usage when set, while all the other equivalent flags just enable the feature. This patch fixes that, so now setting RemoteApp = TRUE just enables the front client to do remoteApps.
Commits on Apr 10, 2022
Commits on Apr 8, 2022
Commits on Apr 7, 2022
Switch to official OpenSSL Download location and away from github.
One of the benefits is that this adds support for building with OpenSSL 3.0 versions without breaking support for building with 1.1.1.
As part of the work, the assumption that there is an /archive/ in the download path is removed.
Furthermore, cmake modules for finding OpenSSL are updated in order to support 3.0.
Commits on Apr 6, 2022