Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Fix output of ASN.1 GN | Tobias Brunner | 2013-06-11 | 1 | -1/+1 | |
| | ||||||
* | Use chunk_from_str in identification_from_string | Tobias Brunner | 2013-06-11 | 1 | -17/+5 | |
| | | | | | We always have a non-empty string in those cases as "" is now handled as ID_ANY. | |||||
* | Use local variable in chunk_from_str() | Tobias Brunner | 2013-06-11 | 1 | -2/+2 | |
| | | | | | This allows using strdup() or other string functions as argument without calling them twice. | |||||
* | Parse empty string as ID_ANY | Tobias Brunner | 2013-06-11 | 1 | -2/+3 | |
| | ||||||
* | Allow memstr() to be called with NULL arguments | Tobias Brunner | 2013-06-11 | 1 | -1/+6 | |
| | ||||||
* | Removed unused clalloc() function | Tobias Brunner | 2013-06-11 | 2 | -18/+0 | |
| | ||||||
* | timeval_add_ms() fixed | Tobias Brunner | 2013-06-11 | 1 | -1/+1 | |
| | | | | 1000000us are exactly 1s so. | |||||
* | Randomly allocate chunk_hash() key during first use | Tobias Brunner | 2013-06-11 | 1 | -1/+46 | |
| | | | | This avoids hash flooding attacks. | |||||
* | Replace chunk_hash() with output from chunk_mac() | Tobias Brunner | 2013-06-11 | 2 | -75/+31 | |
| | | | | | | | The quality is way better, the calculation is a bit slower though. The key is statically initialized to zero, which will be changed later to prevent hash flooding. | |||||
* | Adding chunk_mac() which calculates a 64-bit MAC using SipHash-2-4 | Tobias Brunner | 2013-06-11 | 2 | -3/+133 | |
| | ||||||
* | Allow memwipe() to be called with NULL argument | Tobias Brunner | 2013-05-27 | 1 | -0/+4 | |
| | ||||||
* | capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymore | Martin Willi | 2013-05-15 | 1 | -6/+0 | |
| | ||||||
* | capabilities: initialize supplementary groups only when doing a setuid() | Martin Willi | 2013-05-15 | 1 | -1/+1 | |
| | ||||||
* | openssl: Properly cleanup OpenSSL library | Tobias Brunner | 2013-05-08 | 1 | -7/+0 | |
| | ||||||
* | settings: Add a set_default_str() to set a different default for a key | Martin Willi | 2013-05-06 | 2 | -0/+31 | |
| | | | | | The value is set only if it is not configured in strongswan.conf or has not been set() otherwise. | |||||
* | backtrace: use atos instead of addr2line on OS X to resolve source lines | Martin Willi | 2013-05-06 | 1 | -3/+11 | |
| | ||||||
* | backtrace: add an alternative stack unwinding implementation using libunwind | Martin Willi | 2013-05-06 | 1 | -5/+34 | |
| | ||||||
* | leak-detective: add support for OS X by hooking default malloc zone | Martin Willi | 2013-05-06 | 1 | -5/+160 | |
| | ||||||
* | leak-detective: remove unused malloc call counters | Martin Willi | 2013-05-06 | 1 | -7/+0 | |
| | ||||||
* | leak-detective: align allocations on both 32 and 64-bit systems to 32 bytes | Martin Willi | 2013-05-06 | 1 | -0/+5 | |
| | ||||||
* | leak-detective: call tzset() explicitly before enabling leak detective | Martin Willi | 2013-05-06 | 1 | -6/+11 | |
| | | | | | tzset() is hard to whitelist on some systems, as there is no symbol involved. Call tzset() explicitly before initialization to avoid false positives. | |||||
* | leak-detective: override malloc functions instead of using deprecated hooks | Martin Willi | 2013-05-06 | 1 | -128/+206 | |
| | | | | | | | malloc hooks have become deprecated, and their use has always been problematic, especially in multi-threaded applications. Replace the functionality by overriding all malloc functions and query the system allocator functions using dlsym() with RTLD_NEXT. | |||||
* | esc() is only used if dladdr(3) is available5.0.3dr3 | Tobias Brunner | 2013-03-08 | 1 | -12/+13 | |
| | ||||||
* | Don't invoke addr2line if dladdr() did not yield a filename | Martin Willi | 2013-03-04 | 1 | -1/+1 | |
| | ||||||
* | backtrace_t.log() takes a NULL file pointer to log to registered dbg() hook | Martin Willi | 2013-03-04 | 2 | -33/+71 | |
| | ||||||
* | Don't use color escapes when printing backtraces to a non-TTY file | Martin Willi | 2013-03-04 | 1 | -11/+20 | |
| | ||||||
* | Add a utility function to resolve TTY color escape codes dynamically | Martin Willi | 2013-03-04 | 2 | -0/+103 | |
| | ||||||
* | make TNC Access Requestor ID available to IMVs | Andreas Steffen | 2013-03-03 | 2 | -12/+18 | |
| | ||||||
* | added getpwuid_r and initgroups to whitelist | Andreas Steffen | 2013-03-03 | 1 | -0/+2 | |
| | ||||||
* | When running with an unprivileged user, initialize supplementary groups | Martin Willi | 2013-03-01 | 1 | -1/+37 | |
| | ||||||
* | Add a global return_success() method implementation | Martin Willi | 2013-02-14 | 2 | -0/+13 | |
| | ||||||
* | Merge branch 'pt-tls' | Martin Willi | 2013-02-14 | 1 | -0/+5 | |
|\ | ||||||
| * | Add a chunk_from_str() initializer that does not include 0-terminator | Martin Willi | 2013-01-15 | 1 | -0/+5 | |
| | | ||||||
* | | time is a time_t pointer | Andreas Steffen | 2013-02-04 | 1 | -1/+1 | |
|/ | ||||||
* | Replace optionsfrom LGPLv2 header by a GPLv2 | Martin Willi | 2012-11-30 | 1 | -7/+7 | |
| | ||||||
* | Moved utils.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 5 | -3/+1272 | |
| | ||||||
* | Moved settings_t to utils folder | Tobias Brunner | 2012-10-24 | 2 | -0/+1540 | |
| | ||||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 5 | -3/+269 | |
| | ||||||
* | Moved enum_name_t to utils folder | Tobias Brunner | 2012-10-24 | 2 | -0/+217 | |
| | ||||||
* | Moved chunk_t to utils folder | Tobias Brunner | 2012-10-24 | 3 | -1/+1009 | |
| | ||||||
* | Moved printf hooks to utils folder | Tobias Brunner | 2012-10-24 | 2 | -0/+758 | |
| | ||||||
* | Moved integrity_checker_t to utils folder | Tobias Brunner | 2012-10-24 | 2 | -0/+431 | |
| | ||||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 11 | -2464/+3 | |
| | ||||||
* | Moved packet_t and tun_device_t to networking folder | Tobias Brunner | 2012-10-24 | 4 | -857/+0 | |
| | ||||||
* | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 4 | -800/+2 | |
| | ||||||
* | Resolve hosts by DNS name in separate threads so we can cancel them | Tobias Brunner | 2012-10-18 | 1 | -44/+6 | |
| | | | | | | | | | | getaddrinfo(3) may block a long time so proper termination of the daemon may block if DNS servers are not reachable. getaddrinfo(3) is an optional cancellation point in posix threads so it might still block a shutdown but at least on Android (with the signal based pthread_cancel implementation) it works, on Linux starter will kill charon anyway after a while. | |||||
* | Make static analyzers happy when parsing hosts from sockaddr_t | Tobias Brunner | 2012-09-28 | 1 | -2/+4 | |
| | ||||||
* | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -5/+5 | |
| | ||||||
* | Avoid calculating the hash if hashtable is empty | Tobias Brunner | 2012-09-21 | 1 | -0/+5 | |
| | ||||||
* | Avoid memset in is_anyaddr() | Tobias Brunner | 2012-09-21 | 1 | -6/+2 | |
| |