Nikolaos D. Bougalis d5f981f5fc Address issues identified by external review: ...

* RIPD-1617, RIPD-1619, RIPD-1621:
  Verify serialized public keys more strictly before
  using them.

* RIPD-1618:
    * Simplify the base58 decoder logic.
    * Reduce the complexity of the base58 encoder and
      eliminate a potential out-of-bounds memory access.
    * Improve type safety by using an `enum class` to
      enforce strict type checking for token types.

* RIPD-1616:
  Avoid calling `memcpy` with a null pointer even if the
  size is specified as zero, since it results in undefined
  behavior.

Acknowledgements:
Ripple thanks Guido Vranken for responsibly disclosing these
issues.

Bug Bounties and Responsible Disclosures:
We welcome reviews of the rippled code and urge researchers
to responsibly disclose any issues that they may find. For
more on Ripple's Bug Bounty program, please visit:
https://ripple.com/bug-bounty

2018-03-21 20:39:18 -07:00

..

app

Address issues identified by external review:

2018-03-21 20:39:18 -07:00

basics

Add RangeSet serialization

2018-01-17 11:21:53 -08:00

beast

Fix unit test compiler warnings

2017-08-17 12:41:45 -07:00

conditions

Add Escrow support:

2017-03-06 14:59:32 -05:00

consensus

Revert "Convert code to use boost::beast"

2018-02-12 11:55:59 -05:00

core

Replace DeadlineTimer with asio::steadyTimer (RIPD-1356):

2017-07-31 18:39:58 -04:00

csf

Use LedgerTrie for preferred ledger (RIPD-1551):

2018-02-02 20:38:38 -05:00

json

Limit nesting of json commands

2018-01-17 15:33:15 -08:00

jtx

Revert "Convert code to use boost::beast"

2018-02-12 11:55:59 -05:00

ledger

Refactor FeatureBitset:

2017-12-01 14:15:05 -05:00

nodestore

Revert "Convert code to use boost::beast"

2018-02-12 11:55:59 -05:00

overlay

Address issues identified by external review:

2018-03-21 20:39:18 -07:00

peerfinder

Don't include unit test sources in code coverage (RIPD-1132):

2016-09-02 15:26:16 -04:00

protocol

Address issues identified by external review:

2018-03-21 20:39:18 -07:00

resource

Convert more timing code to <chrono>

2017-12-01 14:15:05 -05:00

rpc

Address issues identified by external review:

2018-03-21 20:39:18 -07:00

server

Improve handling of malformed JSON-RPC requests

2018-02-16 12:00:32 -05:00

shamap

Implement Shards

2018-01-17 13:43:54 -08:00

unit_test

Revert "Convert code to use boost::beast"

2018-02-12 11:55:59 -05:00

unity

Address issues identified by external review:

2018-03-21 20:39:18 -07:00

csf.h

Redesign CSF framework (RIPD-1361):

2017-12-01 14:15:04 -05:00

jtx.h

Cleanup unit test support code (RIPD-1380):

2017-01-13 15:01:20 -08:00