Thijs Alkemade

The function `-[Launchd itemObject:]` attempts to find the executable by parsing the plist of a newly installed launch agent. The checks on the parsed data are lacking, making it possible...

zip with preserved symlinks in full_release.sh

1

This ensures that frameworks aren't turned 3x as large by duplicating Resources, Headers and Versions/Current. This fixes https://code.google.com/p/iterm2/issues/detail?id=2387

Stringprep calls may reveal random memory

7

When a bind iq comes in, the following happens: 1. [c2s/c2s.c#L285](https://github.com/jabberd2/jabberd2/blob/fca57e6207c21469943e1546427d534b5799e848/c2s/c2s.c#L285) grabs the bytes of the chosen resource. If the resource was > 1023 bytes, only the first 1023 bytes...

[Bug]: Remotely reachable stack buffer overflow due to the use of unishox2_decompress_simple

1

### Category Other ### Hardware Not Applicable ### Firmware Version 2.3.7.30fbcab ### Description There is a stack buffer overflow when decompressing ATAK messages here: https://github.com/meshtastic/firmware/blob/75dc8cccecd52da78f1d69eeb4eb017fbc68f26c/src/modules/AtakPluginModule.cpp#L114 https://github.com/meshtastic/firmware/blob/75dc8cccecd52da78f1d69eeb4eb017fbc68f26c/src/modules/AtakPluginModule.cpp#L119 https://github.com/meshtastic/firmware/blob/75dc8cccecd52da78f1d69eeb4eb017fbc68f26c/src/modules/AtakPluginModule.cpp#L126 https://github.com/meshtastic/firmware/blob/75dc8cccecd52da78f1d69eeb4eb017fbc68f26c/src/modules/AtakPluginModule.cpp#L133 The function...