Tobias Stoeckmann 5fcd60e264 Reject files larger than 16384 bytes in read_sigfile. ...

If signature files are larger than SIZE_MAX, not enough memory could
be allocated for this file. The script repo-add rejects files which
are larger than 16384 bytes, therefore handle these as errors here,
too.

While at it, I also rearranged the code to avoid a quite harmless
TOCTOU race condition between stat() and fopen().

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
Signed-off-by: Allan McRae <allan@archlinux.org>

2016-08-30 18:10:40 +10:00

..

po

Regenerate translations for 5.0.1

2016-02-23 13:09:39 +10:00

.gitignore

libalpm: add pkg-config file

2012-04-25 20:02:36 -04:00

add.c

Release resources on error paths.

2016-08-30 18:10:40 +10:00

add.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

alpm_list.c

add alpm_list_append

2016-01-15 14:47:36 +10:00

alpm_list.h

add alpm_list_append

2016-01-15 14:47:36 +10:00

alpm.c

Always use proper error code in alpm_initialize.

2016-08-30 18:10:40 +10:00

alpm.h

Prevent wrapping of enum items

2016-05-05 13:52:23 +10:00

backup.c

Release resources on error paths.

2016-08-30 18:10:40 +10:00

backup.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

base64.c

base64.c: comment out unused variable

2014-01-15 15:54:56 +10:00

base64.h

base64: don't compile base64_encode() function

2011-10-17 12:03:02 -05:00

be_local.c

Release resources on error paths.

2016-08-30 18:10:40 +10:00

be_package.c

Reject files larger than 16384 bytes in read_sigfile.

2016-08-30 18:10:40 +10:00

be_sync.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

conflict.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

conflict.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

db.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

db.h

Prevent wrapping of enum items

2016-05-05 13:52:23 +10:00

delta.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

delta.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

deps.c

recursedeps: include cyclic dependencies

2016-08-30 18:10:40 +10:00

deps.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

diskspace.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

diskspace.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

dload.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

dload.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

error.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

filelist.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

filelist.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

graph.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

graph.h

Make alpm_graph state signedness explicit

2016-01-04 13:59:19 +10:00

group.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

group.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

handle.c

make alpm_unlock and trans_interrupt async safe

2016-02-23 12:41:36 +10:00

handle.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

hook.c

do not rely on localdb for hook matching

2016-02-23 12:15:43 +10:00

hook.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

ini.c

run hooks during trans_commit

2015-10-18 10:59:23 +10:00

ini.h

run hooks during trans_commit

2015-10-18 10:59:23 +10:00

libalpm.pc.in

Add large file support CFLAGS to pkgconfig file

2015-12-04 11:06:49 +10:00

libarchive-compat.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

log.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

log.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

Makefile.am

run hooks during trans_commit

2015-10-18 10:59:23 +10:00

md5.c

Use 32-bit wide integer type in PolarSSL code

2012-01-07 11:27:41 -06:00

md5.h

Update MD5 routines with changes from PolarSSL

2011-08-11 20:17:21 -05:00

package.c

do not rely on localdb for hook matching

2016-02-23 12:15:43 +10:00

package.h

fix spelling mistakes

2016-05-05 13:52:23 +10:00

pkghash.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

pkghash.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

rawstr.c

Remove ts and sw from vim modeline when noet is set

2014-01-28 20:19:25 +10:00

remove.c

Use versions specified in optdepends

2016-02-26 15:18:43 +10:00

remove.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

sha2.c

Use 32-bit wide integer type in PolarSSL code

2012-01-07 11:27:41 -06:00

sha2.h

Add sha2 (sha256) routines from PolarSSL

2011-08-15 07:07:13 -05:00

signing.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

signing.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

sync.c

do not rely on localdb for hook matching

2016-02-23 12:15:43 +10:00

sync.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

trans.c

make alpm_unlock and trans_interrupt async safe

2016-02-23 12:41:36 +10:00

trans.h

Update copyright years for 2016

2016-01-04 13:27:08 +10:00

util-common.c

Split common utility functions for libalpm and pacman

2013-01-04 21:49:37 +10:00

util-common.h

Split common utility functions for libalpm and pacman

2013-01-04 21:49:37 +10:00

util.c

Avoid logical OR duplication warning from gcc-6

2016-05-05 13:52:23 +10:00

util.h

make alpm_unlock and trans_interrupt async safe

2016-02-23 12:41:36 +10:00

version.c

Update copyright years for 2016

2016-01-04 13:27:08 +10:00