Armaan Sandhu 70cc4f3d72 escape: reject UTF-16 surrogates in \u escapes in cunescape_one() (#43079) ...

A `\u` escape in `cunescape_one()` was accepted for any 16-bit value
except NUL. That range `0x0000`-`0xFFFF` includes the UTF-16 surrogates
`0xD800`-`0xDFFF`, which are not valid Unicode scalar values and cannot
be encoded as valid UTF-8.

(cherry picked from commit eb03267070)

2026-07-23 10:54:52 +02:00

..

ac-power

…

analyze

calendarspec: warn on weekday/date conflict in systemd-analyze and systemd-run

2026-07-19 22:34:04 +01:00

ask-password

ask-password: do not reuse flags across Varlink calls

2026-06-13 09:39:28 +01:00

backlight

tree-wide: use device_get_sysattr_unsigned() and friends

2026-05-18 02:55:56 +09:00

basic

escape: reject UTF-16 surrogates in \u escapes in cunescape_one() (#43079)

2026-07-23 10:54:52 +02:00

battery-check

…

binfmt

…

bless-boot

bless-boot: avoid false maybe-uninitialized warning

2026-07-19 22:34:04 +01:00

boot

boot: cover BCD offsets past the buffer

2026-07-23 10:54:52 +02:00

bootctl

bootctl: Fix prepend when installing systemd-boot for the first time

2026-07-19 22:34:05 +01:00

bpf

Various dlopen/linking cleanups from #42100 (#42166)

2026-05-19 08:54:27 +02:00

busctl

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

cgls

…

cgtop

cgtop: use cg helper to parse pids.current

2026-05-28 20:55:01 +01:00

core

core/dbus: do not block the manager on GetId during bus (re-)connection

2026-07-23 10:54:52 +02:00

coredump

coredumpctl: use break instead of continue for time bound checks

2026-07-19 22:34:04 +01:00

coverage

…

creds

creds: reject empty validity intervals

2026-07-23 10:54:52 +02:00

cryptenroll

cryptsetup: Skip tokens with JSON parsing errors

2026-07-19 22:34:05 +01:00

cryptsetup

tpm2-util: initialize NvPCRs on first extension

2026-07-19 22:34:06 +01:00

debug-generator

…

delta

…

detect-virt

…

dissect

dissect: include image size in JSON output

2026-07-23 10:54:52 +02:00

environment-d-generator

…

escape

…

factory-reset

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

firstboot

firstboot: validate root shell credentials

2026-07-23 10:54:52 +02:00

fsck

fsck: don't apply invalid mode or repair values

2026-07-19 22:34:05 +01:00

fstab-generator

misc: fix minor error handling issues

2026-06-16 11:44:08 +01:00

fundamental

tree-wide: fix some double word errors like "the the"

2026-07-19 22:34:05 +01:00

fuzz

pe-binary: bound section data against file size, cap UKI zero-padding hash, validate optional header size

2026-05-29 04:30:48 +09:00

getty-generator

…

gpt-auto-generator

gpt-auto-generator: fix error propagation in add_root_mount()

2026-06-16 10:26:23 +02:00

growfs

growfs: downgrade dependency on libcryptsetup to optional

2026-06-25 10:50:50 +02:00

hibernate-resume

…

home

homed: verify privileged worker changes

2026-07-23 10:54:52 +02:00

hostname

vsock-util: allow VMADDR_CID_ANY as local CID if enabled in hwdb

2026-06-13 15:54:50 +02:00

hwdb

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

id128

id128: reject app-specific IDs for new

2026-07-23 10:54:52 +02:00

imds

imds: fix logging

2026-06-25 10:50:50 +02:00

import

oci-util: Don't fall back to default registry for explicit registries

2026-07-19 22:34:06 +01:00

include

include: add hwcaps missing from glibc and musl

2026-07-19 22:34:05 +01:00

integritysetup

generator: order cryptsetup/verity/integrity after systemd-udevd

2026-06-25 10:50:50 +02:00

journal

journalctl: reject field listing with filters

2026-07-19 22:34:06 +01:00

journal-remote

journal-remote: zero-initialize MHD daemon wrapper

2026-07-19 22:34:06 +01:00

kernel-install

fd-util: add wildcard_fd_is_valid() helper and use it tree-wide

2026-05-28 13:33:08 +01:00

keyutil

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

libc

libc: dlsym the time64 alias for epoll_pwait2() on 32-bit _TIME_BITS=64

2026-05-24 15:00:37 +02:00

libsystemd

sd-device: allow non-safe characters in uevent files

2026-07-23 10:54:52 +02:00

libsystemd-network

sd-dhcp-relay: fix off-by-one when discarding BOOTREQUEST messages by hops count

2026-07-19 22:34:06 +01:00

libudev

libudev: replace unique list entries in place

2026-07-19 22:34:06 +01:00

locale

vconsole: reject empty layout during keymap conversion with error

2026-07-19 22:34:06 +01:00

login

logind: set session->started before seat_read_active_vt() call

2026-07-19 22:34:05 +01:00

machine

machined: Allow user ids in open_shell for machine-dbus

2026-07-19 22:34:06 +01:00

machine-id-setup

…

measure

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

modules-load

…

mount

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

mountfsd

…

mstack

…

mute-console

…

network

network: silence false warning about unitialized variable

2026-07-23 10:54:52 +02:00

notify

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

nspawn

nspawn: use chase() for creating dev nodes

2026-07-19 22:34:07 +01:00

nsresourced

sd-event: use CLOCK_BOOTTIME for rate limits

2026-07-19 22:34:05 +01:00

nss-myhostname

nss-myhostname: keep IPv6 probe result stable

2026-07-19 22:34:06 +01:00

nss-mymachines

…

nss-resolve

nss-resolve: fix blank array checks and improve NSS status codes

2026-06-26 11:40:48 +01:00

nss-systemd

nss-systemd: avoid ELF TLS for recursion guard

2026-06-25 10:50:50 +02:00

oom

oom: use cgroup.kill if available (#42373)

2026-06-10 21:56:01 +02:00

path

…

pcrextend

tpm2-util: initialize NvPCRs on first extension

2026-07-19 22:34:06 +01:00

pcrlock

tpm2-util: keep the measurement log's torn-write marker intact

2026-07-19 22:34:06 +01:00

portable

portable: honor --force for directory extensions

2026-07-22 16:44:26 +01:00

pstore

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

ptyfwd

…

quotacheck

quotacheck: don't apply an invalid quotacheck.mode= value

2026-07-19 22:34:04 +01:00

random-seed

random-seed: fix wrong error variable in log_error_errno()

2026-06-15 14:16:28 +02:00

remount-fs

…

repart

repart: skip generated files during dry runs

2026-07-23 10:54:52 +02:00

reply-password

…

report

report: rename varlink dir for upload plugins

2026-06-15 20:54:37 +02:00

resolve

resolved: preserve unchanged question on asymmetric redirect

2026-07-19 22:34:06 +01:00

rfkill

tree-wide: use device_get_sysattr_safe_string()

2026-05-18 02:55:56 +09:00

rpm

…

run

run: reject waiting for remain-after-exit services

2026-07-19 22:34:06 +01:00

run-generator

…

sbsign

sbsign: write unaligned signature size into WIN_CERTIFICATE header

2026-07-19 22:34:05 +01:00

shared

hwdb: strip the root from filenames when generating hwdb.bin

2026-07-23 10:54:52 +02:00

shutdown

shutdown: do not delay VM shutdown (#42396)

2026-06-03 16:10:20 +02:00

sleep

tree-wide: use device_get_sysattr_unsigned() and friends

2026-05-18 02:55:56 +09:00

socket-activate

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

socket-proxy

socket-proxy: implement PROXY protocol v1

2026-05-20 04:29:59 +09:00

ssh-generator

vsock-util: allow VMADDR_CID_ANY as local CID if enabled in hwdb

2026-06-13 15:54:50 +02:00

stdio-bridge

…

storage

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

storagetm

misc: fix minor error handling issues

2026-06-16 11:44:08 +01:00

sulogin-shell

…

sysctl

…

sysext

sysext: validate work directory metadata before removal

2026-07-19 22:34:06 +01:00

sysinstall

sysinstall: Look for valid kernel image before installing

2026-07-19 22:34:04 +01:00

system-update-generator

…

systemctl

systemctl: fix continue placement in clean-or-freeze error handling

2026-06-26 11:40:48 +01:00

systemd

sd-dlopen: fix build on 'hppa'

2026-06-17 08:45:41 +02:00

sysupdate

sysupdate: use strverscmp_improved() like everywhere else

2026-07-19 22:34:06 +01:00

sysusers

sysusers: validate shell credentials

2026-07-23 10:54:52 +02:00

test

escape: reject UTF-16 surrogates in \u escapes in cunescape_one() (#43079)

2026-07-23 10:54:52 +02:00

timedate

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

timesync

meson: drop libdl, threads, and librt dependencies

2026-05-18 21:17:38 +00:00

tmpfiles

tmpfiles: add hardening in glob_item_recursively

2026-07-19 22:34:05 +01:00

tpm2-setup

tpm2: stop the software TPM before the ESP is unmounted on shutdown

2026-07-19 22:34:07 +01:00

tty-ask-password-agent

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

udev

udev/net: reset the config list head in link_configs_free()

2026-07-19 22:34:06 +01:00

ukify

Rebased and reapplied the fix, dropped the test case.

2026-07-19 22:34:07 +01:00

update-done

…

update-utmp

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

user-sessions

…

userdb

sd-event: use CLOCK_BOOTTIME for rate limits

2026-07-19 22:34:05 +01:00

validatefs

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

varlinkctl

tree-wide: get rid of old dispatch_verb

2026-05-16 18:37:10 +02:00

vconsole

vconsole-util: move code to read EFI keyboard layout into generic code

2026-05-20 16:34:21 +02:00

veritysetup

veritysetup: don't measure root hash signature after unsigned fallback

2026-06-25 10:50:50 +02:00

version

…

vmspawn

vmspawn/nspawn: Always use a per-machine runtime subdirectory

2026-07-19 22:34:04 +01:00

volatile-root

…

vpick

…

xdg-autostart-generator

…