Headline
CVE-2022-30592: Release 3.1.0 · litespeedtech/lsquic@a74702c
liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.
Permalink
Showing with 294 additions and 287 deletions.
- +1 −1 APIs.txt
- +11 −0 CHANGELOG
- +1 −9 CMakeLists.txt
- +1 −1 CONTRIBUTORS.txt
- +1 −1 EXAMPLES.txt
- +1 −1 LICENSE
- +1 −1 bin/CMakeLists.txt
- +1 −1 bin/duck_client.c
- +1 −1 bin/duck_server.c
- +1 −1 bin/echo_client.c
- +1 −1 bin/echo_server.c
- +1 −1 bin/http_client.c
- +1 −1 bin/http_server.c
- +1 −1 bin/md5_client.c
- +1 −1 bin/md5_server.c
- +1 −1 bin/perf_client.c
- +1 −1 bin/perf_server.c
- +1 −1 bin/prog.c
- +1 −1 bin/prog.h
- +1 −1 bin/test_cert.c
- +1 −1 bin/test_cert.h
- +1 −1 bin/test_common.c
- +1 −1 bin/test_common.h
- +3 −3 docs/conf.py
- +3 −3 include/lsquic.h
- +1 −1 include/lsquic_types.h
- +1 −1 include/lsxpack_header.h
- +1 −1 src/CMakeLists.txt
- +2 −1 src/liblsquic/CMakeLists.txt
- +1 −1 src/liblsquic/common_cert_set_2.c
- +1 −1 src/liblsquic/common_cert_set_2a.inc
- +1 −1 src/liblsquic/common_cert_set_2b.inc
- +1 −1 src/liblsquic/common_cert_set_3.c
- +1 −1 src/liblsquic/common_cert_set_3a.inc
- +1 −1 src/liblsquic/common_cert_set_3b.inc
- +1 −1 src/liblsquic/fiu-local.h
- +1 −1 src/liblsquic/ls-sfparser.c
- +1 −1 src/liblsquic/ls-sfparser.h
- +1 −1 src/liblsquic/lsquic_adaptive_cc.c
- +1 −1 src/liblsquic/lsquic_adaptive_cc.h
- +1 −1 src/liblsquic/lsquic_alarmset.c
- +1 −1 src/liblsquic/lsquic_alarmset.h
- +1 −1 src/liblsquic/lsquic_arr.c
- +1 −1 src/liblsquic/lsquic_arr.h
- +1 −1 src/liblsquic/lsquic_attq.c
- +1 −1 src/liblsquic/lsquic_attq.h
- +1 −1 src/liblsquic/lsquic_bbr.c
- +1 −1 src/liblsquic/lsquic_bbr.h
- +1 −1 src/liblsquic/lsquic_bw_sampler.c
- +1 −1 src/liblsquic/lsquic_bw_sampler.h
- +1 −1 src/liblsquic/lsquic_byteswap.h
- +1 −1 src/liblsquic/lsquic_cfcw.c
- +1 −1 src/liblsquic/lsquic_chsk_stream.c
- +1 −1 src/liblsquic/lsquic_chsk_stream.h
- +1 −1 src/liblsquic/lsquic_cong_ctl.h
- +1 −1 src/liblsquic/lsquic_conn.c
- +1 −1 src/liblsquic/lsquic_conn.h
- +1 −1 src/liblsquic/lsquic_conn_flow.h
- +1 −1 src/liblsquic/lsquic_conn_public.h
- +1 −1 src/liblsquic/lsquic_crand.c
- +1 −1 src/liblsquic/lsquic_crand.h
- +1 −1 src/liblsquic/lsquic_crt_compress.c
- +1 −1 src/liblsquic/lsquic_crt_compress.h
- +1 −1 src/liblsquic/lsquic_crypto.c
- +1 −1 src/liblsquic/lsquic_crypto.h
- +1 −1 src/liblsquic/lsquic_cubic.c
- +1 −1 src/liblsquic/lsquic_cubic.h
- +1 −1 src/liblsquic/lsquic_data_in_if.h
- +1 −1 src/liblsquic/lsquic_di_error.c
- +1 −1 src/liblsquic/lsquic_di_hash.c
- +1 −1 src/liblsquic/lsquic_di_nocopy.c
- +1 −1 src/liblsquic/lsquic_enc_sess.h
- +1 −1 src/liblsquic/lsquic_enc_sess_common.c
- +1 −1 src/liblsquic/lsquic_enc_sess_ietf.c
- +1 −1 src/liblsquic/lsquic_eng_hist.c
- +1 −1 src/liblsquic/lsquic_eng_hist.h
- +1 −1 src/liblsquic/lsquic_engine.c
- +1 −1 src/liblsquic/lsquic_engine_public.h
- +1 −1 src/liblsquic/lsquic_ev_log.c
- +1 −1 src/liblsquic/lsquic_ev_log.h
- +1 −1 src/liblsquic/lsquic_frab_list.c
- +1 −1 src/liblsquic/lsquic_frab_list.h
- +1 −1 src/liblsquic/lsquic_frame_common.c
- +1 −1 src/liblsquic/lsquic_frame_common.h
- +1 −1 src/liblsquic/lsquic_frame_reader.c
- +1 −1 src/liblsquic/lsquic_frame_reader.h
- +1 −1 src/liblsquic/lsquic_frame_writer.c
- +1 −1 src/liblsquic/lsquic_frame_writer.h
- +1 −1 src/liblsquic/lsquic_full_conn.c
- +1 −1 src/liblsquic/lsquic_full_conn.h
- +1 −1 src/liblsquic/lsquic_full_conn_ietf.c
- +1 −1 src/liblsquic/lsquic_global.c
- +1 −1 src/liblsquic/lsquic_handshake.c
- +1 −1 src/liblsquic/lsquic_handshake.h
- +1 −1 src/liblsquic/lsquic_hash.c
- +1 −1 src/liblsquic/lsquic_hash.h
- +1 −1 src/liblsquic/lsquic_hcsi_reader.c
- +1 −1 src/liblsquic/lsquic_hcsi_reader.h
- +1 −1 src/liblsquic/lsquic_hcso_writer.c
- +1 −1 src/liblsquic/lsquic_hcso_writer.h
- +1 −1 src/liblsquic/lsquic_headers.h
- +1 −1 src/liblsquic/lsquic_headers_stream.c
- +1 −1 src/liblsquic/lsquic_headers_stream.h
- +1 −1 src/liblsquic/lsquic_hkdf.c
- +1 −1 src/liblsquic/lsquic_hkdf.h
- +1 −1 src/liblsquic/lsquic_hpi.c
- +1 −1 src/liblsquic/lsquic_hpi.h
- +1 −1 src/liblsquic/lsquic_hq.h
- +1 −1 src/liblsquic/lsquic_hspack_valid.c
- +1 −1 src/liblsquic/lsquic_http.c
- +1 −1 src/liblsquic/lsquic_http1x_if.c
- +1 −1 src/liblsquic/lsquic_http1x_if.h
- +1 −1 src/liblsquic/lsquic_ietf.h
- +1 −1 src/liblsquic/lsquic_int_types.h
- +1 −1 src/liblsquic/lsquic_logger.c
- +1 −1 src/liblsquic/lsquic_logger.h
- +1 −1 src/liblsquic/lsquic_malo.c
- +1 −1 src/liblsquic/lsquic_malo.h
- +1 −1 src/liblsquic/lsquic_min_heap.c
- +1 −1 src/liblsquic/lsquic_min_heap.h
- +1 −1 src/liblsquic/lsquic_mini_conn.c
- +1 −1 src/liblsquic/lsquic_mini_conn.h
- +1 −1 src/liblsquic/lsquic_mini_conn_ietf.c
- +1 −1 src/liblsquic/lsquic_mini_conn_ietf.h
- +1 −1 src/liblsquic/lsquic_minmax.c
- +1 −1 src/liblsquic/lsquic_minmax.h
- +1 −1 src/liblsquic/lsquic_mm.c
- +1 −1 src/liblsquic/lsquic_mm.h
- +1 −1 src/liblsquic/lsquic_pacer.c
- +1 −1 src/liblsquic/lsquic_pacer.h
- +1 −1 src/liblsquic/lsquic_packet_common.c
- +1 −1 src/liblsquic/lsquic_packet_common.h
- +1 −1 src/liblsquic/lsquic_packet_gquic.c
- +1 −1 src/liblsquic/lsquic_packet_gquic.h
- +1 −1 src/liblsquic/lsquic_packet_ietf.h
- +1 −1 src/liblsquic/lsquic_packet_in.c
- +1 −1 src/liblsquic/lsquic_packet_in.h
- +1 −1 src/liblsquic/lsquic_packet_out.c
- +1 −1 src/liblsquic/lsquic_packet_out.h
- +1 −1 src/liblsquic/lsquic_packet_resize.c
- +1 −1 src/liblsquic/lsquic_packet_resize.h
- +1 −1 src/liblsquic/lsquic_parse.h
- +1 −1 src/liblsquic/lsquic_parse_Q046.c
- +1 −1 src/liblsquic/lsquic_parse_Q050.c
- +1 −1 src/liblsquic/lsquic_parse_common.c
- +1 −1 src/liblsquic/lsquic_parse_common.h
- +1 −1 src/liblsquic/lsquic_parse_gquic_be.c
- +1 −1 src/liblsquic/lsquic_parse_gquic_be.h
- +1 −1 src/liblsquic/lsquic_parse_gquic_common.c
- +1 −1 src/liblsquic/lsquic_parse_ietf.h
- +1 −1 src/liblsquic/lsquic_parse_ietf_v1.c
- +1 −1 src/liblsquic/lsquic_parse_iquic_common.c
- +1 −1 src/liblsquic/lsquic_pr_queue.c
- +1 −1 src/liblsquic/lsquic_pr_queue.h
- +1 −1 src/liblsquic/lsquic_purga.c
- +1 −1 src/liblsquic/lsquic_purga.h
- +1 −1 src/liblsquic/lsquic_push_promise.h
- +1 −1 src/liblsquic/lsquic_qdec_hdl.c
- +1 −1 src/liblsquic/lsquic_qdec_hdl.h
- +4 −1 src/liblsquic/lsquic_qenc_hdl.c
- +1 −1 src/liblsquic/lsquic_qenc_hdl.h
- +1 −1 src/liblsquic/lsquic_qlog.c
- +1 −1 src/liblsquic/lsquic_qlog.h
- +1 −1 src/liblsquic/lsquic_qpack_dec_logger.h
- +1 −1 src/liblsquic/lsquic_qpack_enc_logger.h
- +1 −1 src/liblsquic/lsquic_qpack_exp.c
- +1 −1 src/liblsquic/lsquic_qpack_exp.h
- +1 −1 src/liblsquic/lsquic_qtags.h
- +1 −1 src/liblsquic/lsquic_rechist.c
- +1 −1 src/liblsquic/lsquic_rechist.h
- +1 −1 src/liblsquic/lsquic_rtt.c
- +1 −1 src/liblsquic/lsquic_rtt.h
- +1 −1 src/liblsquic/lsquic_send_ctl.c
- +1 −1 src/liblsquic/lsquic_send_ctl.h
- +1 −1 src/liblsquic/lsquic_senhist.c
- +1 −1 src/liblsquic/lsquic_senhist.h
- +1 −1 src/liblsquic/lsquic_set.c
- +1 −1 src/liblsquic/lsquic_set.h
- +1 −1 src/liblsquic/lsquic_sfcw.c
- +1 −1 src/liblsquic/lsquic_sfcw.h
- +1 −1 src/liblsquic/lsquic_shsk_stream.c
- +1 −1 src/liblsquic/lsquic_shsk_stream.h
- +1 −1 src/liblsquic/lsquic_sizes.h
- +1 −1 src/liblsquic/lsquic_spi.c
- +1 −1 src/liblsquic/lsquic_spi.h
- +1 −1 src/liblsquic/lsquic_stock_shi.c
- +1 −1 src/liblsquic/lsquic_stock_shi.h
- +1 −1 src/liblsquic/lsquic_str.c
- +1 −1 src/liblsquic/lsquic_str.h
- +1 −1 src/liblsquic/lsquic_stream.c
- +1 −1 src/liblsquic/lsquic_stream.h
- +1 −1 src/liblsquic/lsquic_tokgen.c
- +1 −1 src/liblsquic/lsquic_tokgen.h
- +1 −1 src/liblsquic/lsquic_trans_params.c
- +1 −1 src/liblsquic/lsquic_trans_params.h
- +1 −1 src/liblsquic/lsquic_trechist.c
- +1 −1 src/liblsquic/lsquic_trechist.h
- +1 −1 src/liblsquic/lsquic_util.c
- +1 −1 src/liblsquic/lsquic_util.h
- +1 −1 src/liblsquic/lsquic_varint.c
- +1 −1 src/liblsquic/lsquic_varint.h
- +1 −1 src/liblsquic/lsquic_ver_neg.h
- +1 −1 src/liblsquic/lsquic_version.c
- +1 −1 src/liblsquic/lsquic_version.h
- +1 −1 src/liblsquic/lsquic_xxhash.c
- +1 −1 src/liblsquic/lsquic_xxhash.h
- +1 −1 tests/CMakeLists.txt
- +1 −1 tests/graph_cubic.c
- +1 −1 tests/mini_parse.c
- +1 −1 tests/test_ack.c
- +1 −1 tests/test_ack_merge.c
- +1 −1 tests/test_ackgen_gquic_be.c
- +1 −1 tests/test_ackparse_gquic_be.c
- +1 −1 tests/test_ackparse_ietf.c
- +1 −1 tests/test_alarmset.c
- +1 −1 tests/test_alt_svc_ver.c
- +1 −1 tests/test_arr.c
- +1 −1 tests/test_attq.c
- +1 −1 tests/test_blocked_gquic_be.c
- +1 −1 tests/test_bw_sampler.c
- +1 −1 tests/test_chlo_gen.c
- +1 −1 tests/test_clear_aead.c
- +1 −1 tests/test_conn_close_gquic_be.c
- +1 −1 tests/test_conn_hash.c
- +1 −1 tests/test_crypto_gen.c
- +1 −1 tests/test_cubic.c
- +1 −1 tests/test_dec.c
- +1 −1 tests/test_di_nocopy.c
- +1 −1 tests/test_elision.c
- +1 −1 tests/test_engine_ctor.c
- +1 −1 tests/test_export_key.c
- +1 −1 tests/test_frame_chop.c
- +1 −1 tests/test_frame_reader.c
- +1 −1 tests/test_frame_rw.c
- +1 −1 tests/test_frame_writer.c
- +1 −1 tests/test_goaway_gquic_be.c
- +1 −1 tests/test_h3_framing.c
- +1 −1 tests/test_hcsi_reader.c
- +1 −1 tests/test_hkdf.c
- +1 −1 tests/test_hpi.c
- +1 −1 tests/test_lsquic_hash.c
- +1 −1 tests/test_malo.c
- +1 −1 tests/test_min_heap.c
- +1 −1 tests/test_minmax.c
- +1 −1 tests/test_packet_out.c
- +1 −1 tests/test_packet_resize.c
- +1 −1 tests/test_packno_len.c
- +1 −1 tests/test_parse_packet_in.c
- +1 −1 tests/test_purga.c
- +1 −1 tests/test_qlog.c
- +1 −1 tests/test_quic_be_floats.c
- +1 −1 tests/test_rechist.c
- +1 −1 tests/test_reg_pkt_headergen.c
- +1 −1 tests/test_rst_stream_gquic_be.c
- +1 −1 tests/test_rst_stream_ietf.c
- +1 −1 tests/test_rtt.c
- +1 −1 tests/test_send_headers.c
- +1 −1 tests/test_senhist.c
- +1 −1 tests/test_set.c
- +1 −1 tests/test_sfcw.c
- +1 −1 tests/test_shi.c
- +1 −1 tests/test_some_packets.c
- +1 −1 tests/test_spi.c
- +1 −1 tests/test_stop_waiting_gquic_be.c
- +1 −1 tests/test_stream.c
- +1 −1 tests/test_streamgen.c
- +1 −1 tests/test_streamparse.c
- +1 −1 tests/test_tokgen.c
- +1 −1 tests/test_trapa.c
- +1 −1 tests/test_trechist.c
- +1 −1 tests/test_varint.c
- +1 −1 tests/test_ver_nego.c
- +1 −1 tests/test_wuf_gquic_be.c
- +1 −1 wincompat/README.txt
- +1 −1 wincompat/sys/queue.h
- +1 −1 wincompat/vc_compat.h
Related news
CVE-2022-30592: Release 3.1.0 · litespeedtech/lsquic@a74702c
liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.