| Vulnerability | v6 | master/v7 |
|---|---|---|
| VuJ55.1: Stack Buffer Overflow in Digest Authentication; advisory SQUID-2023:3 | commit dc0e10b | commit 538ad49 |
| VuJ55.2: Use-After-Free in TRACE Requests; CVE-2023-49288; advisory SQUID-2023:9 | commit 9358e99 | fixed since v6 |
| VuJ55.3: Partial Content Parsing Use-After-Free; [CVE-2021-31807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE- |
| #!/bin/bash | |
| set -e | |
| log=/tmp/mark-overridden.log | |
| echo "Install these if you have not already:" | |
| echo sudo apt install clang-tidy-14 | |
| echo sudo apt install libkrb5-dev | |
| echo sudo apt install libcap-dev |
| #!/bin/bash | |
| set -e | |
| log=/tmp/no-NULLs.log | |
| if ! git diff --quiet; then | |
| echo "There are unstaged changes. This script may modify sources." | |
| echo "Stage changes to avoid permanent losses when things go bad." | |
| exit 1 |
| 2022/05/09 09:48:22.694| 1,5| CodeContext.cc(60) Entering: conn19 | |
| 2022/05/09 09:48:22.694| 5,5| TcpAcceptor.cc(295) acceptOne: Listener: conn13 local=[::]:3128 remote=[::] FD 36 flags=9 accepted new connection conn19 local=127.0.0.1:3128 remote=127.0.0.1:57162 FD 20 flags=65 handler Subscription: 0x560eec10fcb0*1 | |
| 2022/05/09 09:48:22.695| 5,5| AsyncCall.cc(29) AsyncCall: The AsyncCall httpAccept constructed, this=0x560eec114ec0 [call51] | |
| 2022/05/09 09:48:22.695| 5,5| AsyncCall.cc(96) ScheduleCall: TcpAcceptor.cc(331) will call httpAccept(conn19 local=127.0.0.1:3128 remote=127.0.0.1:57162 FD 20 flags=65, master52) [call51] | |
| -- | |
| 2022/05/09 09:48:22.695| 1,5| CodeContext.cc(60) Entering: conn19 | |
| 2022/05/09 09:48:22.695| 5,5| AsyncCallQueue.cc(59) fireNext: entering httpAccept(conn19 local=127.0.0.1:3128 remote=127.0.0.1:57162 FD 20 flags=65, master52) | |
| 2022/05/09 09:48:22.695| 5,5| AsyncCall.cc(41) make: make call httpAccept [call51] | |
| 2022/05/09 09:48:22.695| 33,4| client_side.cc(2313) httpAccept: conn19 local=127.0.0. |
| # Invalid read of size 4 | |
| { | |
| mainInitialize-addr4 | |
| Memcheck:Addr4 | |
| ... | |
| fun:_ZL14mainInitializev | |
| ... | |
| fun:main | |
| } | |
| { |
Legend and caveats:
| #!/bin/sh | |
| # Removes "HERE" macro from Squid debugs() calls in the given files. | |
| # By default, scans all files (containing HERE words) under git control. | |
| # Specify file name(s) as parameters to define the set of files to scan. | |
| if test -z "$1" | |
| then | |
| # Find the names of all git-controlled files containing the word HERE. | |
| Search='git grep --full-name --name-only --word-regexp HERE' |