| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Merge branch 'leak-detective-dlsym' | Martin Willi | 2013-05-06 | 7 | -149/+519 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | Replaces the use of deprecated glibc malloc hooks by overloading malloc calls and find the originals using dlsym(RTLD_NEXT). On OS X, we now support the use of leak detective by changing the default malloc zone functions, backtraces get resolved using atos. It seems that the performance bottleneck now is stack unwinding. Unfortunately a new libunwind based backtrace() is not much faster than the libc variant; we keep that option nonetheless for platforms without backtrace(). | |||||
| | * | scripts: add a simple test utility to do some malloc() benchmarking/profiling | Martin Willi | 2013-05-06 | 3 | -1/+89 | |
| | | | ||||||
| | * | backtrace: use atos instead of addr2line on OS X to resolve source lines | Martin Willi | 2013-05-06 | 1 | -3/+11 | |
| | | | ||||||
| | * | backtrace: add an alternative stack unwinding implementation using libunwind | Martin Willi | 2013-05-06 | 3 | -6/+44 | |
| | | | ||||||
| | * | leak-detective: add support for OS X by hooking default malloc zone | Martin Willi | 2013-05-06 | 1 | -5/+160 | |
| | | | ||||||
| | * | leak-detective: remove unused malloc call counters | Martin Willi | 2013-05-06 | 1 | -7/+0 | |
| | | | ||||||
| | * | leak-detective: align allocations on both 32 and 64-bit systems to 32 bytes | Martin Willi | 2013-05-06 | 1 | -0/+5 | |
| | | | ||||||
| | * | leak-detective: call tzset() explicitly before enabling leak detective | Martin Willi | 2013-05-06 | 1 | -6/+11 | |
| | | | | | | | | | | | tzset() is hard to whitelist on some systems, as there is no symbol involved. Call tzset() explicitly before initialization to avoid false positives. | |||||
| | * | leak-detective: override malloc functions instead of using deprecated hooks | Martin Willi | 2013-05-06 | 1 | -128/+206 | |
| |/ | | | | | | | malloc hooks have become deprecated, and their use has always been problematic, especially in multi-threaded applications. Replace the functionality by overriding all malloc functions and query the system allocator functions using dlsym() with RTLD_NEXT. | |||||
| * | Merge branch 'silent-automake' | Martin Willi | 2013-05-06 | 12 | -5/+20 | |
| |\ | | | | | | | | | | | Adds support for --enable/disable-silent-rules when building with Automake 1.11 or 1.12. make V=0 or V=1 can be used to build with a different verbosity than ./configured. | |||||
| | * | Add -s to make if --enable-silent-rules is ./configured | Martin Willi | 2013-05-06 | 2 | -0/+5 | |
| | | | ||||||
| | * | Use the GEN silent rule when generating files with sed | Martin Willi | 2013-05-06 | 7 | -2/+9 | |
| | | | ||||||
| | * | Use the GEN silent rule when generating oid database with perl | Martin Willi | 2013-05-06 | 2 | -2/+2 | |
| | | | ||||||
| | * | Use the GEN silent rule when generating gperf files | Martin Willi | 2013-05-06 | 3 | -1/+3 | |
| | | | ||||||
| | * | Provide the --enable-silent-rules ./configure option with automake 1.11 and 1.12 | Martin Willi | 2013-05-06 | 1 | -0/+1 | |
| |/ | ||||||
| * | Introduce an optional logger_t.vlog() method with format string and arguments | Martin Willi | 2013-05-06 | 2 | -16/+85 | |
| | | | | | | | | To have more flexibility in the logging backend, receiving the original format string and do printf() substitution in the logger may be preferable. An additional but optional logger method does not touch the behavior of existing loggers. | |||||
| * | Raise an ALERT_PROPOSAL_MISMATCH_CHILD also when receiving NO_PROPOSAL_CHOSEN | Martin Willi | 2013-05-06 | 1 | -0/+20 | |
| | | ||||||
| * | Raise an ALERT_PROPOSAL_MISMATCH_IKE also when receiving NO_PROPOSAL_CHOSEN | Martin Willi | 2013-05-06 | 1 | -0/+20 | |
| | | ||||||
| * | eap-radius: add an option to disable accounting for tunnels without virtual IP | Martin Willi | 2013-05-06 | 1 | -0/+30 | |
| | | ||||||
| * | eap-radius: use IKE_SA unique id instead of peer identity to manage virtual IPs | Martin Willi | 2013-05-06 | 3 | -34/+100 | |
| | | | | | Fixes some corner cases if multiple tunnels use the same peer identity. | |||||
| * | Don't unset IKE_SA on bus before we released virtual IPs and attributes | Martin Willi | 2013-05-06 | 1 | -10/+8 | |
| | | ||||||
| * | New Android release after adding AES-GCM, IPv6-in-IPv4 and using kernel-netlink | Tobias Brunner | 2013-05-03 | 1 | -2/+2 | |
| | | | | | | | | | libipsec now supports AES-GCM, IPv6 tunnels over IPv4 are supported, native x86 libraries are built (requires a new Vstr build script). Also, the existing kernel-netlink plugin now provides the kernel-net implementation, which should be more stable in case multiple interfaces are up and have IP addresses installed on them. | |||||
| * | libipsec: Fix memory leak in event relay | Tobias Brunner | 2013-05-03 | 1 | -0/+1 | |
| | | ||||||
| * | android: Use stronger ESP proposal including AES-GCM | Tobias Brunner | 2013-05-03 | 1 | -0/+6 | |
| | | ||||||
| * | libipsec: Add support for AES-GCM | Tobias Brunner | 2013-05-03 | 1 | -3/+45 | |
| | | ||||||
| * | libipsec: Wrap traditional algorithms in AEAD wrapper | Tobias Brunner | 2013-05-03 | 3 | -110/+91 | |
| | | ||||||
| * | android: Remove unused methods on NetworkManager/network_manager_t | Tobias Brunner | 2013-05-03 | 3 | -177/+1 | |
| | | ||||||
| * | android: Ignore interface 'lo' | Tobias Brunner | 2013-05-03 | 1 | -2/+4 | |
| | | | | | | Android adds a default route via 'lo' if no connectivity is available causing charon to send packets via lo and triggering DPD. | |||||
| * | android: Repurpose android-net to simply handle connectivity events | Tobias Brunner | 2013-05-03 | 3 | -59/+34 | |
| | | | | | | | Using the events by NetworkManager/ConnectivityManager to trigger roam events instead of the events generated by the kernel-netlink plugin the noise level is much lower. | |||||
| * | kernel-netlink: Add an option to disable roam events | Tobias Brunner | 2013-05-03 | 2 | -1/+16 | |
| | | ||||||
| * | android: Replace android-net plugin with kernel-netlink | Tobias Brunner | 2013-05-03 | 2 | -3/+8 | |
| | | | | | | Virtual IPs are not handled by the kernel-netlink plugin and tun devices are ignored. | |||||
| * | android: Set strongswan.conf options before initializing other libraries | Tobias Brunner | 2013-05-03 | 1 | -36/+44 | |
| | | ||||||
| * | kernel-netlink: Define defaults for routing table and prio | Tobias Brunner | 2013-05-03 | 1 | -0/+8 | |
| | | ||||||
| * | openssl: Define a default for FIPS_MODE | Tobias Brunner | 2013-05-03 | 1 | -0/+4 | |
| | | ||||||
| * | In memwipe_check(), don't put magic on stack when calling do_magic() | Martin Willi | 2013-05-03 | 1 | -3/+3 | |
| | | | | | Otherwise the magic might be on the stack while checking it. | |||||
| * | Dump stack if memwipe() check fails | Martin Willi | 2013-05-03 | 1 | -3/+19 | |
| | | ||||||
| * | Use attest database in tnc/tnccs-20-os scenario5.0.4 | Andreas Steffen | 2013-04-21 | 6 | -2/+268 | |
| | | ||||||
| * | fixed a 64bit time_t issue | Andreas Steffen | 2013-04-21 | 1 | -3/+4 | |
| | | ||||||
| * | destroy SQL query | Andreas Steffen | 2013-04-21 | 1 | -0/+1 | |
| | | ||||||
| * | Keep last AR ID | Andreas Steffen | 2013-04-21 | 1 | -0/+2 | |
| | | ||||||
| * | Added use of openssl-fips library to NEWS | Andreas Steffen | 2013-04-19 | 1 | -0/+2 | |
| | | ||||||
| * | check for successful activation of FIPS mode | Andreas Steffen | 2013-04-19 | 1 | -1/+4 | |
| | | ||||||
| * | install FIPS-aware OpenSSL Debian packages | Andreas Steffen | 2013-04-19 | 1 | -18/+5 | |
| | | ||||||
| * | Added openssl-ikev2/rw-cpa scenario | Andreas Steffen | 2013-04-19 | 29 | -0/+472 | |
| | | ||||||
| * | build openssl-fips in KVM root-image | Andreas Steffen | 2013-04-19 | 5 | -0/+49 | |
| | | ||||||
| * | fixed typo | Andreas Steffen | 2013-04-19 | 1 | -1/+1 | |
| | | ||||||
| * | During libstrongswan initialization, check if memwipe() works as expected | Martin Willi | 2013-04-18 | 1 | -1/+51 | |
| | | ||||||
| * | added libstrongswan.plugins.openssl.fips_mode to man page | Andreas Steffen | 2013-04-16 | 1 | -0/+3 | |
| | | ||||||
| * | support of OpenSSL FIPS-140-2 library | Andreas Steffen | 2013-04-16 | 3 | -1/+21 | |
| | | ||||||
| * | build soup plugin in KVM test environment | Andreas Steffen | 2013-04-15 | 2 | -1/+2 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |