mirror of
https://github.com/jamesstringer90/appsandbox.git
synced 2026-10-22 02:52:49 -05:00
James Stringer
c617d0f374
- C3 appsandbox-clipboard.m: inbound `format_len` was unbounded, so a
32-bit `format_len + 1` could wrap to malloc(0) then read/write ~4GB;
bound it against CLIP_MAX_PAYLOAD and allocate in size_t. Both sites.
- M13 appsandbox-agent.m: mute/unmute (and shutdown) fork+exec children were
never reaped, accumulating zombies; ignore SIGCHLD so Darwin auto-reaps.
- M19 appsandbox-clipboard.m (guest half): handle the new symlink entry type
-- recreate links with symlink() instead of treating them as dirs.