Dmitry Verenitsin 22de26cc7c Merge commit from fork ...

* [libesl] Validate `Content-Length` in `esl_recv_event`.

`atol()` accepted negative values, allowing a remote ESL peer to cause
a one-byte heap underwrite (`Content-Length: -1`) or NULL-pointer
dereference (`Content-Length: -2`, since `esl_assert` compiles out
under `NDEBUG`). Reject negative and oversized values, and check
`malloc` failure instead of relying on `assert`.

Cap at `ESL_MAX_CONTENT_LENGTH` (16 MiB).

* [libesl] Add test_recv_event.

2026-05-26 22:28:23 +03:00

..

docker/debian

[GHA] Use release libs for trixie releases (#3016)

2026-05-08 00:53:07 +03:00

ISSUE_TEMPLATE

Update issue templates

2020-08-07 17:26:52 -04:00

workflows

Merge commit from fork

2026-05-26 22:28:23 +03:00