tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	leak-detective: Use callback functions to report leaks and usage information	Martin Willi	2013-11-06	3	-45/+100
\| \| \| \|	This is more flexible than printing reports to a FILE.
*	identification: Properly check length before comparing for binary DN equality	Martin Willi	2013-10-31	1	-1/+1
\| \| \| \|	Fixes CVE-2013-6075.
*	utils: Include stdio.h for fmemopen() replacement	Tobias Brunner	2013-10-29	1	-0/+1
\| \| \| \| \|	This might now be required because Vstr is not necessarily required anymore, which means stdio.h might not be pulled in by prinf_hook.h.
*	utils: Fix check for fmemopen() fallback implementation	Martin Willi	2013-10-24	2	-2/+3
\|
*	printf-hook-builtin: Don't rely on isinf() return value signedness	Martin Willi	2013-10-24	1	-8/+9
\| \| \| \| \|	Many systems don't return a negative value for negative infinities; so do a separate check.
*	utils: Provide a fmemopen(3) fallback using BSD funopen()	Martin Willi	2013-10-24	2	-0/+61
\|
*	chunk: Add helper function to create a chunk from data read from a file ↵	Tobias Brunner	2013-10-23	2	-0/+40
\| \| \| \|	descriptor
*	utils: Add utility function to calculate padding length	Tobias Brunner	2013-10-17	1	-12/+16
\|
*	vstr: Forward actual field width	Tobias Brunner	2013-10-11	1	-1/+1
\| \| \| \| \|	fmt_field_width is a flag that indicates if a field width is defined in obj_field_width.
*	printf-hook-builtin: Print NaN/Infinity floating point values as such	Martin Willi	2013-10-11	1	-2/+22
\|
*	printf-hook-builtin: Correctly round up floating point values	Martin Willi	2013-10-11	1	-1/+15
\|
*	printf-hook-builtin: Add some preliminary floating point support	Martin Willi	2013-10-11	1	-2/+194
\| \| \| \| \|	This minimalistic implementation has no aspiration for completeness or accuracy, and just provides what we need.
*	printf-hook-builtin: Support GNU %m specifier	Martin Willi	2013-10-11	1	-0/+8
\|
*	printf-hook-builtin: Add a new "builtin" backend using its own printf() routines	Martin Willi	2013-10-11	3	-0/+1017
\| \| \| \| \| \|	Overloads printf C library functions by a self-contained implementation, based on klibc. Does not yet feature all the required default formatters, including those for floating point values.
*	printf-hook: Move glibc/vstr printf hook backends to separate files	Martin Willi	2013-10-11	6	-379/+575
\|
*	printf-hook: Write to output stream instead of the FD directly when using Vstr	Tobias Brunner	2013-09-24	1	-12/+12
\| \| \| \| \|	This avoids problems when other stdio functions are used (fputs, fwrite) as writes via Vstr/FD were always unbuffered.
*	Added tzset memory leak to whitelist	Andreas Steffen	2013-08-28	1	-0/+1
\|
*	chunk: Print chunks without separator if + modifier is used	Tobias Brunner	2013-08-24	2	-2/+3
\|
*	utils: Add case-insensitive version of strpfx()	Tobias Brunner	2013-08-24	1	-0/+8
\|
*	backtrace: rename clone() method clashing with system call	Martin Willi	2013-08-09	1	-2/+2
\| \| \| \|	Fixes #376.
*	utils: add round_up/down() helper functions	Martin Willi	2013-07-29	1	-0/+23
\|
*	capabilities: Proper error handling when reading groups	Tobias Brunner	2013-07-24	1	-1/+8
\|
*	Fix various API doc issues and typos	Tobias Brunner	2013-07-18	1	-1/+0
\| \| \| \|	Partially based on an old patch by Adrian-Ken Rueegsegger.
*	identification: parse identities having a "@@" prefix as ID_RFC822_ADDR	Martin Willi	2013-07-18	1	-11/+10
\| \| \| \|	Original patch by Gerald Richter.
*	capabilities: Add function to check if a capability is held, without keeping it	Tobias Brunner	2013-07-18	2	-45/+75
\| \| \| \| \|	This can be useful if capabilities are not required anymore after dropping privileges.
*	leak-detective: remove hdr entry when reallocating zero bytes	Martin Willi	2013-07-12	1	-0/+6
\|
*	leak-detective: print total of allocated/leaked bytes in usage/report	Martin Willi	2013-07-12	1	-5/+13
\|
*	leak-detective: add a usage threshold option based on the number of allocations	Martin Willi	2013-07-10	1	-6/+11
\|
*	leak-detective: set_state() only affects the calling thread	Martin Willi	2013-07-10	2	-15/+2
\| \| \| \| \|	The only user (bfd backtraces) is fine with that, and we really should not mess the enable flag while doing allocations with other threads.
*	leak-detective: take a copy of backtrace while printing traces	Martin Willi	2013-07-10	1	-2/+3
\| \| \| \| \|	As we don't want to hold the lock, we must make sure backtraces keep valid while printing them.
*	backtrace: add a clone() method	Martin Willi	2013-07-10	2	-7/+44
\|
*	leak-detective: remove hdr from the allocation list during realloc()	Martin Willi	2013-07-10	1	-39/+60
\| \| \| \| \| \| \|	If realloc moves an allocation, the original allocation gets freed. We therefore must remove the hdr from the list, as it is invalid. We can add it afterwards once it has been updated, allowing us to unlock the list during reallocation.
*	utils: Add helper function to check a string for a given prefix	Tobias Brunner	2013-07-08	1	-0/+8
\|
*	utils: Convert string helper macros to static inline functions	Tobias Brunner	2013-07-08	1	-6/+15
\|
*	integrity-checker: Use chunk_hash_static() to calculate checksums	Tobias Brunner	2013-06-28	1	-7/+2
\|
*	chunk: Add predictable hash function	Tobias Brunner	2013-06-28	2	-1/+53
\| \| \| \| \|	Since chunk_hash() is randomized its output is not predictable, that is, it is only within the same process.
*	integrity-checker: Fix checksum calculation after randomizing chunk_hash()	Tobias Brunner	2013-06-27	1	-2/+7
\|
*	capabilities: Return effective UID/GID if user did not configure anything	Tobias Brunner	2013-06-25	1	-2/+2
\|
*	capabilities: Report effective UID/GID after dropping capabilities	Tobias Brunner	2013-06-25	1	-1/+1
\|
*	capabilities: Handle CAP_CHOWN specially as it might not be required	Tobias Brunner	2013-06-25	2	-2/+63
\|
*	capabilities: Check effective UID as fallback if capabilities are not supported	Tobias Brunner	2013-06-25	1	-1/+1
\|
*	dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets	Tobias Brunner	2013-06-25	1	-0/+3
\|
*	socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024	Tobias Brunner	2013-06-25	1	-1/+4
\| \| \| \| \|	Since we don't know which ports are used with socket-dynamic we can't demand the capability there, but it might still be required.
*	capabilities: Only plugins that require CAP_NET_ADMIN demand it	Tobias Brunner	2013-06-25	1	-0/+4
\| \| \| \|	The daemon as such does not require this capability.
*	capabilities: Move global capabilities_t instance to libstrongswan	Tobias Brunner	2013-06-25	1	-2/+2
\|
*	capabilities: Ensure required capabilities are actually held by the process/user	Tobias Brunner	2013-06-25	2	-4/+58
\|
*	printf-hook: Avoid double-free when freeing Vstr config	Tobias Brunner	2013-06-21	1	-1/+0
\| \| \| \| \| \| \|	Thread-specific objects get freed when the thread value object is destroyed (wasn't the case earlier, i.e. before 2b19dd35), which may cause the second call to vstr_free_conf() to fail in an assert in Vstr (depending on how it was built).
*	leak-detective: (re-)whitelist some OpenSSL functions	Martin Willi	2013-06-21	1	-0/+5
\| \| \| \| \| \| \|	Some static allocations in plugins won't get freed, because in the test case process the plugins are not destroyed. If a plugin would clean up allocations done while just using the plugin, these show up as leak in the child process, letting tests fail.
*	backtrace: use backtrace_symbols() only if we have backtrace() and dladdr() ↵	Martin Willi	2013-06-19	1	-5/+16
\| \| \| \|	fails
*	utils: Remove volatile qualifier from refcount_t typedef	Tobias Brunner	2013-06-19	1	-2/+1
\| \| \| \| \|	It's not really required anymore (if it ever was) and may cause compiler warnings when using the non atomic versions of ref_get/ref_put.