Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | chunk: Fix signedness warnings caused by chunk_from_* macros | Tobias Brunner | 2013-11-27 | 1 | -3/+3 | |
| | | | | | | There are countless other such warnings because e.g. chunk_create() is called with char*, but at least we prevent users from causing such warnings inadvertently when using these macros. | |||||
* | printf-hook-builtin: Don't use %P to print uppercase hex pointers | Martin Willi | 2013-11-20 | 1 | -6/+0 | |
| | | | | We use %P as custom printf specifier for proposals. | |||||
* | backtrace: Support backtracing even if library is not initialized | Martin Willi | 2013-11-06 | 1 | -2/+2 | |
| | | | | But of course backtracing must be initialized anyway using backtrace_init(). | |||||
* | leak-detective: Call {gm,local}time_r() to allocate static buffer | Martin Willi | 2013-11-06 | 1 | -0/+5 | |
| | | | | | On OS X Mavericks, these functions use a static allocation and are hard to whitelist using other means. | |||||
* | leak-detective: Register OS X specific hooks just once | Martin Willi | 2013-11-06 | 1 | -0/+7 | |
| | | | | | If we initialize libstrongswan more than once in the same process, we may not register the hooks twice. | |||||
* | leak-detective: Reset leak list during cleanup | Martin Willi | 2013-11-06 | 1 | -0/+1 | |
| | | | | This resets leak detective state should it get created/destroyed more than once. | |||||
* | leak-detective: Use callback functions to report leaks and usage information | Martin Willi | 2013-11-06 | 3 | -45/+100 | |
| | | | | This is more flexible than printing reports to a FILE. | |||||
* | identification: Properly check length before comparing for binary DN equality | Martin Willi | 2013-10-31 | 1 | -1/+1 | |
| | | | | Fixes CVE-2013-6075. | |||||
* | utils: Include stdio.h for fmemopen() replacement | Tobias Brunner | 2013-10-29 | 1 | -0/+1 | |
| | | | | | This might now be required because Vstr is not necessarily required anymore, which means stdio.h might not be pulled in by prinf_hook.h. | |||||
* | utils: Fix check for fmemopen() fallback implementation | Martin Willi | 2013-10-24 | 2 | -2/+3 | |
| | ||||||
* | printf-hook-builtin: Don't rely on isinf() return value signedness | Martin Willi | 2013-10-24 | 1 | -8/+9 | |
| | | | | | Many systems don't return a negative value for negative infinities; so do a separate check. | |||||
* | utils: Provide a fmemopen(3) fallback using BSD funopen() | Martin Willi | 2013-10-24 | 2 | -0/+61 | |
| | ||||||
* | chunk: Add helper function to create a chunk from data read from a file ↵ | Tobias Brunner | 2013-10-23 | 2 | -0/+40 | |
| | | | | descriptor | |||||
* | utils: Add utility function to calculate padding length | Tobias Brunner | 2013-10-17 | 1 | -12/+16 | |
| | ||||||
* | vstr: Forward actual field width | Tobias Brunner | 2013-10-11 | 1 | -1/+1 | |
| | | | | | fmt_field_width is a flag that indicates if a field width is defined in obj_field_width. | |||||
* | printf-hook-builtin: Print NaN/Infinity floating point values as such | Martin Willi | 2013-10-11 | 1 | -2/+22 | |
| | ||||||
* | printf-hook-builtin: Correctly round up floating point values | Martin Willi | 2013-10-11 | 1 | -1/+15 | |
| | ||||||
* | printf-hook-builtin: Add some preliminary floating point support | Martin Willi | 2013-10-11 | 1 | -2/+194 | |
| | | | | | This minimalistic implementation has no aspiration for completeness or accuracy, and just provides what we need. | |||||
* | printf-hook-builtin: Support GNU %m specifier | Martin Willi | 2013-10-11 | 1 | -0/+8 | |
| | ||||||
* | printf-hook-builtin: Add a new "builtin" backend using its own printf() routines | Martin Willi | 2013-10-11 | 3 | -0/+1017 | |
| | | | | | | Overloads printf C library functions by a self-contained implementation, based on klibc. Does not yet feature all the required default formatters, including those for floating point values. | |||||
* | printf-hook: Move glibc/vstr printf hook backends to separate files | Martin Willi | 2013-10-11 | 6 | -379/+575 | |
| | ||||||
* | printf-hook: Write to output stream instead of the FD directly when using Vstr | Tobias Brunner | 2013-09-24 | 1 | -12/+12 | |
| | | | | | This avoids problems when other stdio functions are used (fputs, fwrite) as writes via Vstr/FD were always unbuffered. | |||||
* | Added tzset memory leak to whitelist | Andreas Steffen | 2013-08-28 | 1 | -0/+1 | |
| | ||||||
* | chunk: Print chunks without separator if + modifier is used | Tobias Brunner | 2013-08-24 | 2 | -2/+3 | |
| | ||||||
* | utils: Add case-insensitive version of strpfx() | Tobias Brunner | 2013-08-24 | 1 | -0/+8 | |
| | ||||||
* | backtrace: rename clone() method clashing with system call | Martin Willi | 2013-08-09 | 1 | -2/+2 | |
| | | | | Fixes #376. | |||||
* | utils: add round_up/down() helper functions | Martin Willi | 2013-07-29 | 1 | -0/+23 | |
| | ||||||
* | capabilities: Proper error handling when reading groups | Tobias Brunner | 2013-07-24 | 1 | -1/+8 | |
| | ||||||
* | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -1/+0 | |
| | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | |||||
* | identification: parse identities having a "@@" prefix as ID_RFC822_ADDR | Martin Willi | 2013-07-18 | 1 | -11/+10 | |
| | | | | Original patch by Gerald Richter. | |||||
* | capabilities: Add function to check if a capability is held, without keeping it | Tobias Brunner | 2013-07-18 | 2 | -45/+75 | |
| | | | | | This can be useful if capabilities are not required anymore after dropping privileges. | |||||
* | leak-detective: remove hdr entry when reallocating zero bytes | Martin Willi | 2013-07-12 | 1 | -0/+6 | |
| | ||||||
* | leak-detective: print total of allocated/leaked bytes in usage/report | Martin Willi | 2013-07-12 | 1 | -5/+13 | |
| | ||||||
* | leak-detective: add a usage threshold option based on the number of allocations | Martin Willi | 2013-07-10 | 1 | -6/+11 | |
| | ||||||
* | leak-detective: set_state() only affects the calling thread | Martin Willi | 2013-07-10 | 2 | -15/+2 | |
| | | | | | The only user (bfd backtraces) is fine with that, and we really should not mess the enable flag while doing allocations with other threads. | |||||
* | leak-detective: take a copy of backtrace while printing traces | Martin Willi | 2013-07-10 | 1 | -2/+3 | |
| | | | | | As we don't want to hold the lock, we must make sure backtraces keep valid while printing them. | |||||
* | backtrace: add a clone() method | Martin Willi | 2013-07-10 | 2 | -7/+44 | |
| | ||||||
* | leak-detective: remove hdr from the allocation list during realloc() | Martin Willi | 2013-07-10 | 1 | -39/+60 | |
| | | | | | | | If realloc moves an allocation, the original allocation gets freed. We therefore must remove the hdr from the list, as it is invalid. We can add it afterwards once it has been updated, allowing us to unlock the list during reallocation. | |||||
* | utils: Add helper function to check a string for a given prefix | Tobias Brunner | 2013-07-08 | 1 | -0/+8 | |
| | ||||||
* | utils: Convert string helper macros to static inline functions | Tobias Brunner | 2013-07-08 | 1 | -6/+15 | |
| | ||||||
* | integrity-checker: Use chunk_hash_static() to calculate checksums | Tobias Brunner | 2013-06-28 | 1 | -7/+2 | |
| | ||||||
* | chunk: Add predictable hash function | Tobias Brunner | 2013-06-28 | 2 | -1/+53 | |
| | | | | | Since chunk_hash() is randomized its output is not predictable, that is, it is only within the same process. | |||||
* | integrity-checker: Fix checksum calculation after randomizing chunk_hash() | Tobias Brunner | 2013-06-27 | 1 | -2/+7 | |
| | ||||||
* | capabilities: Return effective UID/GID if user did not configure anything | Tobias Brunner | 2013-06-25 | 1 | -2/+2 | |
| | ||||||
* | capabilities: Report effective UID/GID after dropping capabilities | Tobias Brunner | 2013-06-25 | 1 | -1/+1 | |
| | ||||||
* | capabilities: Handle CAP_CHOWN specially as it might not be required | Tobias Brunner | 2013-06-25 | 2 | -2/+63 | |
| | ||||||
* | capabilities: Check effective UID as fallback if capabilities are not supported | Tobias Brunner | 2013-06-25 | 1 | -1/+1 | |
| | ||||||
* | dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets | Tobias Brunner | 2013-06-25 | 1 | -0/+3 | |
| | ||||||
* | socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024 | Tobias Brunner | 2013-06-25 | 1 | -1/+4 | |
| | | | | | Since we don't know which ports are used with socket-dynamic we can't demand the capability there, but it might still be required. | |||||
* | capabilities: Only plugins that require CAP_NET_ADMIN demand it | Tobias Brunner | 2013-06-25 | 1 | -0/+4 | |
| | | | | The daemon as such does not require this capability. |