OpenCC

OpenCC copied to clipboard

Hi, i found a controllable memory allocations in BinaryDict::NewFromFile(), which can cause DOS. I put the POC in the attachment, prove it like this. (compile open_dict with address sanitizer). ./opencc_dict...

morningbread

Hi, i found a heap-out-of-bound-read vulnerability in MarisaDict::NewFromFile(). I put the POC in the attachment, prove it like this. (compile open_dict with address sanitizer). ./opencc_dict -i poc -o tmp -f...

morningbread

Hi, i found a heap-out-of-bound-read vulnerability in BinaryDict::NewFromFile(). I put the POC in the attachment, prove it like this. (compile open_dict with address sanitizer). ./opencc_dict -i poc -o tmp -f...

morningbread

Hi, i found a stack overflow vulnerability in SerializedValues::NewFromFile(). I put the POC in the attachment, prove it like this. (compile open_dict with address sanitizer). ./opencc_dict -i poc -o tmp...

morningbread

Hi, i found a null pointer pointer deference vulnerability in KeyLength(). I put the POC in the attachment, prove it like this. (compile open_dict with address sanitizer). ./opencc_dict -i poc...

morningbread

Update src/README.md to add main files explanation

4

Add some main file explanation to help other developers understand files in the `src` folder.

e10101

返佣还是应该翻译成返佣, 而不是返傭

tangwudu

能不能限制某些生僻字转换成类推简化字，影响手机阅读

13

举一例，如 趙孟頫→赵孟𫖯，那个 頫字在安卓默認字體DroidSans下是豆腐，㑮→𫝈，還有更多類似的，不勝枚舉，他們的繁體字是可以正常顯示的，然而簡體有些屬於民間類推簡化，常見字體是不收錄的，能不能把這些字剔除或單獨列出

tsauibusato

Hello 👋 I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@morningbread) has found a potential issue, which I would be eager to share with...

psmoros

Hi, i found an stack overflow vulnerability in UTF8Util.hpp. I put the POC in the attachment, prove it like this. (compile opencc_phrase_extract with address sanitizer). ./opencc_phrase_extract -o tmp.txt minpoc Then,...

morningbread