neptards
/
capnproto
forked from mirror/capnproto
Code Issues Pull Requests Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
u3-0.9.1
master
release-0.9.1
harris/suspendable-http-requests
revert-1318-doc-improvements
fix-uninitialized-kind
release-0.9.0
blog-0.9
defer-soon
harris/tmp
maybe-ref-null-on-move
release-0.8.0
read-cancelation
fix-ci
optimize-websocket-pump
gateway-tag
debug-stuff
debug-corrupt-taskset
retain-stack-trace-in-disconnect-exception
bhoerner/blockedpumpto-cancel
fix-tail-call-cancel-race
fix-dpi-bugs
kenton/fix-websocket-rpc-cancellation
jlee/encoding-doc-clarification
harris/add-vagrant-win10
no-ninja
peer-identity
complete-cmake
release-tests2
release-tests
debug-canceler
fix-byte-stream-path-shortening-WIP
jlee/two-party-test-fix
harris/try-get-uncaught-exception
http-over-capnp-premature-websocket-termination
harris/expose-atomic-refcount
kenton/fix-889
some-wip-hacks
http-over-capnp
url-encode-dotdot
async-io-refactor
harris/http-error-hook
async-io-refactor-old3
release-0.7.0
fix-sendStream
streaming
bsd-make-compat
fix-http-body-delimiting
skip-qemu-failure
fix-const-array-disposer
fix-http-client-adapter
fix-http-client-adapter-cancelation
harris/replace-tee-try-catches
debug-event-use-after-free
rpc-scratch-space
harris/disallow-refcounted-copy
harris/expose-http-connection-headers-count
promise-tuple
harris/read-all-bytes-safely
synchronous-gzip
harris/add-percent-decode-url-flag
release-0.6.1
http-body-cancellation
harris/fix-percent-encoding-restringification-regression
harris/round-trip-eq-sign-in-url-query
full-bodied-gets
harris/fix-relative-url-parse-bug
permissive-http-headers
release-0.6.0
tweaks
release-0.5.3
tls
detect-amplification-better
afl
source-info
release-0.5.2
release-0.5.1
release-0.4.1
overflow-safe
release-0.5.0
gh-pages
release-0.4.0
release-0.3.0
release-0.2.1
v0.1.0
v0.2.0
v0.2.1
v0.3.0
v0.4.0
v0.4.1
v0.4.1.1
v0.4.1.2
v0.5.0
v0.5.1
v0.5.1.1
v0.5.1.2
v0.5.2
v0.5.3
v0.5.3.1
v0.6.0
v0.6.1
v0.7.0
v0.8.0
v0.9.0
v0.9.1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'master'
${ noResults }
capnproto/security-advisories
History
Kenton Varda eb3944206e
Update README.md 
Remove overly-conservative statement that Cap'n Proto shouldn't be used for possibly-malicious data... things have progressed a lot since that was written.
 		4 years ago
..
2015-03-02-0-c++-integer-overflow.md Fix typos. 9 years ago
2015-03-02-1-c++-integer-underflow.md Add CVE numbers to security advisories. Source: http://www.openwall.com/lists/oss-security/2015/03/17/3 10 years ago
2015-03-02-2-all-cpu-amplification.md Fix typos. 9 years ago
2015-03-05-0-c++-addl-cpu-amplification.md Fix typos. 9 years ago
2017-04-17-0-apple-clang-elides-bounds-check.md CVE number has been assigned 8 years ago
README.md Update README.md 4 years ago

README.md

Security Advisories

This directory contains security advisories issued for Cap'n Proto.

Each advisory explains not just the bug that was fixed, but measures we are taking to avoid the class of bugs in the future.

Reporting Bugs

Please report security bugs to security@sandstorm.io.