fufesou f5ab01f8bd fix(clipboard): win, populate file formats (#15692) ...

* fix(clipboard): win, populate file formats

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): prevent Windows file clipboard OOB access

* reduce diffs to master

Signed-off-by: fufesou <linlong1266@gmail.com>

* comments

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): win, OOBs and double free

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): win, check deep copy

Signed-off-by: fufesou <linlong1266@gmail.com>

* comments

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): harden Windows clipboard memory handling

- clear HGLOBAL aliases after ownership transfers
- validate callback inputs and capability sets
- bound file-content responses and close search handles on errors

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): harden Windows cliprdr memory safety

- validate clipboard descriptors and response sizes
- fix allocation ownership and cleanup paths
- synchronize format-map access across callback and STA threads
- prevent clipboard format TOCTOU races

Signed-off-by: fufesou <linlong1266@gmail.com>

* Comments on stale remote file formats

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): check pointers before using

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): harden Windows COM error handling

- roll back FORMATETC enumeration on deep-copy failure
- keep the enumerator constructor internal
- propagate IStream seek and read failures

Signed-off-by: fufesou <linlong1266@gmail.com>

* explicity `WIN32_FIND_DATAW`

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): validate format data size and simplify lock cleanup

Reject clipboard data exceeding UINT32_MAX before allocation and
keep format-map cleanup and lock release within the owning function.
Add boundary tests for response data sizes.

Signed-off-by: fufesou <linlong1266@gmail.com>

* fix(clipboard): missing frees

Signed-off-by: fufesou <linlong1266@gmail.com>

---------

Signed-off-by: fufesou <linlong1266@gmail.com>

2026-08-06 11:16:01 +08:00

..

client

fix(clipboard): win, populate file formats (#15692)

2026-08-06 11:16:01 +08:00

hbbs_http

refact(oidc): manually open the browser (#15706)

2026-08-04 12:35:04 +08:00

ipc

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

lang

Update Dutch translation (#15767)

2026-08-05 16:51:07 +08:00

platform

fix(linux): stop losing every inhibitor when the ScreenSaver name is absent (#15772)

2026-08-06 10:58:23 +08:00

plugin

refact: remove unnecessary printing (#12000)

2025-06-06 14:52:01 +08:00

privacy_mode

Refact/privacy mode 1 multi monitors (#15321)

2026-06-18 21:27:44 +08:00

server

Audit retry nonce (#15759)

2026-08-06 10:57:09 +08:00

ui

feat(recording): add visibility and service storage options (#15662)

2026-07-25 15:21:13 +08:00

whiteboard

feat: cursor, linux, Xwayland (#12859)

2025-09-06 20:35:51 +08:00

auth_2fa.rs

trust this device to skip 2fa (#9012)

2024-08-12 18:08:33 +08:00

client.rs

swtich_code for hbbs (#15615)

2026-08-04 11:08:59 +08:00

clipboard_file.rs

fix(fuse): umount (#15426)

2026-06-26 16:17:44 +08:00

clipboard.rs

fix: validate RGBA clipboard dimensions (#15672)

2026-07-26 08:56:22 +08:00

common.rs

Audit retry nonce (#15759)

2026-08-06 10:57:09 +08:00

core_main.rs

fix(deploy): don't wipe local id when --deploy gets an empty --id (#15633)

2026-07-20 10:58:28 +08:00

custom_server.rs

A=b, A case insensitive (#9976)

2024-11-20 19:44:24 +08:00

flutter_ffi.rs

fix(android): close outgoing sessions when the task is swiped away (#15753)

2026-08-04 11:18:14 +08:00

flutter.rs

fix(android): close outgoing sessions when the task is swiped away (#15753)

2026-08-04 11:18:14 +08:00

hbbs_http.rs

fix: update download, force tls (#15529)

2026-07-09 15:05:49 +08:00

ipc.rs

swtich_code for hbbs (#15615)

2026-08-04 11:08:59 +08:00

kcp_stream.rs

fix kcp_stream

2025-06-13 00:30:21 +08:00

keyboard.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

lan.rs

fix: check valid id (#15535)

2026-07-14 15:35:52 +08:00

lang.rs

cjk (#15379)

2026-06-22 14:47:12 +08:00

lib.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

main.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

naming.rs

fix: http/https proxy (#7821)

2024-04-25 11:46:21 +08:00

port_forward.rs

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

privacy_mode.rs

feat(macos): initial privacy mode support [a simple try] (#14102)

2026-01-27 16:38:37 +08:00

rendezvous_mediator.rs

Support controller user attribution in audit logs (#15407)

2026-06-26 15:07:27 +08:00

server.rs

fix stale primary display selection (#15460)

2026-07-23 17:17:01 +08:00

service.rs

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

tray.rs

fix(windows): prevent ghost and duplicate tray icons (#15689) (#15690)

2026-07-29 12:18:57 +08:00

ui_cm_interface.rs

fix(linux): make quit_cm actually quit the connection manager (#15718)

2026-07-30 12:01:05 +08:00

ui_interface.rs

feat(recording): add visibility and service storage options (#15662)

2026-07-25 15:21:13 +08:00

ui_session_interface.rs

fix: non-E2EE show dialog (#15514)

2026-07-06 17:05:11 +08:00

ui.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

updater.rs

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

virtual_display_manager.rs

fix: uninstall, idd (#13142)

2025-10-12 09:14:21 +08:00