Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | capabilities: Move global capabilities_t instance to libstrongswan | Tobias Brunner | 2013-06-25 | 1 | -2/+2 | |
| | ||||||
* | capabilities: Ensure required capabilities are actually held by the process/user | Tobias Brunner | 2013-06-25 | 2 | -4/+58 | |
| | ||||||
* | printf-hook: Avoid double-free when freeing Vstr config | Tobias Brunner | 2013-06-21 | 1 | -1/+0 | |
| | | | | | | | Thread-specific objects get freed when the thread value object is destroyed (wasn't the case earlier, i.e. before 2b19dd35), which may cause the second call to vstr_free_conf() to fail in an assert in Vstr (depending on how it was built). | |||||
* | leak-detective: (re-)whitelist some OpenSSL functions | Martin Willi | 2013-06-21 | 1 | -0/+5 | |
| | | | | | | | Some static allocations in plugins won't get freed, because in the test case process the plugins are not destroyed. If a plugin would clean up allocations done while just using the plugin, these show up as leak in the child process, letting tests fail. | |||||
* | backtrace: use backtrace_symbols() only if we have backtrace() and dladdr() ↵ | Martin Willi | 2013-06-19 | 1 | -5/+16 | |
| | | | | fails | |||||
* | utils: Remove volatile qualifier from refcount_t typedef | Tobias Brunner | 2013-06-19 | 1 | -2/+1 | |
| | | | | | It's not really required anymore (if it ever was) and may cause compiler warnings when using the non atomic versions of ref_get/ref_put. | |||||
* | utils: ref_get() returns the new value of the reference counter | Martin Willi | 2013-06-11 | 2 | -4/+9 | |
| | | | | This allows us to use ref_get() for getting unique values. | |||||
* | leak-detective: Resolve hooked functions during initialization | Tobias Brunner | 2013-06-11 | 1 | -1/+4 | |
| | | | | | | | | | If uses of dlopen(), e.g. when loading plugins, produce errors an error string could get allocated dynamically. At this point realloc() might not yet be resolved and when dlsym() is later called by leak detective to do so the error string might get freed while leak detective is disabled and real_free() will be called with a pointer into one of leak detective's memory blocks instead of a pointer to the block itself, causing a SIGSEGV. | |||||
* | Add getter for the number of leaks to leak_detective_t | Tobias Brunner | 2013-06-11 | 2 | -2/+23 | |
| | ||||||
* | Gracefully handle NULL as argument for enum_from_name() | Tobias Brunner | 2013-06-11 | 1 | -1/+1 | |
| | ||||||
* | Fail DN parsing if OID is unterminated | Tobias Brunner | 2013-06-11 | 1 | -2/+6 | |
| | | | | | This is the case if the last OID is not followed by a = or if the string starts with a =. | |||||
* | Fix DN printing if last RDN has an empty value | Tobias Brunner | 2013-06-11 | 1 | -11/+32 | |
| | ||||||
* | Fix DN parsing if last RDN has an empty value | Tobias Brunner | 2013-06-11 | 1 | -1/+1 | |
| | ||||||
* | Fix output of ASN.1 GN | Tobias Brunner | 2013-06-11 | 1 | -1/+1 | |
| | ||||||
* | Use chunk_from_str in identification_from_string | Tobias Brunner | 2013-06-11 | 1 | -17/+5 | |
| | | | | | We always have a non-empty string in those cases as "" is now handled as ID_ANY. | |||||
* | Use local variable in chunk_from_str() | Tobias Brunner | 2013-06-11 | 1 | -2/+2 | |
| | | | | | This allows using strdup() or other string functions as argument without calling them twice. | |||||
* | Parse empty string as ID_ANY | Tobias Brunner | 2013-06-11 | 1 | -2/+3 | |
| | ||||||
* | Allow memstr() to be called with NULL arguments | Tobias Brunner | 2013-06-11 | 1 | -1/+6 | |
| | ||||||
* | Removed unused clalloc() function | Tobias Brunner | 2013-06-11 | 2 | -18/+0 | |
| | ||||||
* | timeval_add_ms() fixed | Tobias Brunner | 2013-06-11 | 1 | -1/+1 | |
| | | | | 1000000us are exactly 1s so. | |||||
* | Randomly allocate chunk_hash() key during first use | Tobias Brunner | 2013-06-11 | 1 | -1/+46 | |
| | | | | This avoids hash flooding attacks. | |||||
* | Replace chunk_hash() with output from chunk_mac() | Tobias Brunner | 2013-06-11 | 2 | -75/+31 | |
| | | | | | | | The quality is way better, the calculation is a bit slower though. The key is statically initialized to zero, which will be changed later to prevent hash flooding. | |||||
* | Adding chunk_mac() which calculates a 64-bit MAC using SipHash-2-4 | Tobias Brunner | 2013-06-11 | 2 | -3/+133 | |
| | ||||||
* | Allow memwipe() to be called with NULL argument | Tobias Brunner | 2013-05-27 | 1 | -0/+4 | |
| | ||||||
* | capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymore | Martin Willi | 2013-05-15 | 1 | -6/+0 | |
| | ||||||
* | capabilities: initialize supplementary groups only when doing a setuid() | Martin Willi | 2013-05-15 | 1 | -1/+1 | |
| | ||||||
* | openssl: Properly cleanup OpenSSL library | Tobias Brunner | 2013-05-08 | 1 | -7/+0 | |
| | ||||||
* | settings: Add a set_default_str() to set a different default for a key | Martin Willi | 2013-05-06 | 2 | -0/+31 | |
| | | | | | The value is set only if it is not configured in strongswan.conf or has not been set() otherwise. | |||||
* | backtrace: use atos instead of addr2line on OS X to resolve source lines | Martin Willi | 2013-05-06 | 1 | -3/+11 | |
| | ||||||
* | backtrace: add an alternative stack unwinding implementation using libunwind | Martin Willi | 2013-05-06 | 1 | -5/+34 | |
| | ||||||
* | leak-detective: add support for OS X by hooking default malloc zone | Martin Willi | 2013-05-06 | 1 | -5/+160 | |
| | ||||||
* | leak-detective: remove unused malloc call counters | Martin Willi | 2013-05-06 | 1 | -7/+0 | |
| | ||||||
* | leak-detective: align allocations on both 32 and 64-bit systems to 32 bytes | Martin Willi | 2013-05-06 | 1 | -0/+5 | |
| | ||||||
* | leak-detective: call tzset() explicitly before enabling leak detective | Martin Willi | 2013-05-06 | 1 | -6/+11 | |
| | | | | | tzset() is hard to whitelist on some systems, as there is no symbol involved. Call tzset() explicitly before initialization to avoid false positives. | |||||
* | leak-detective: override malloc functions instead of using deprecated hooks | Martin Willi | 2013-05-06 | 1 | -128/+206 | |
| | | | | | | | malloc hooks have become deprecated, and their use has always been problematic, especially in multi-threaded applications. Replace the functionality by overriding all malloc functions and query the system allocator functions using dlsym() with RTLD_NEXT. | |||||
* | esc() is only used if dladdr(3) is available5.0.3dr3 | Tobias Brunner | 2013-03-08 | 1 | -12/+13 | |
| | ||||||
* | Don't invoke addr2line if dladdr() did not yield a filename | Martin Willi | 2013-03-04 | 1 | -1/+1 | |
| | ||||||
* | backtrace_t.log() takes a NULL file pointer to log to registered dbg() hook | Martin Willi | 2013-03-04 | 2 | -33/+71 | |
| | ||||||
* | Don't use color escapes when printing backtraces to a non-TTY file | Martin Willi | 2013-03-04 | 1 | -11/+20 | |
| | ||||||
* | Add a utility function to resolve TTY color escape codes dynamically | Martin Willi | 2013-03-04 | 2 | -0/+103 | |
| | ||||||
* | make TNC Access Requestor ID available to IMVs | Andreas Steffen | 2013-03-03 | 2 | -12/+18 | |
| | ||||||
* | added getpwuid_r and initgroups to whitelist | Andreas Steffen | 2013-03-03 | 1 | -0/+2 | |
| | ||||||
* | When running with an unprivileged user, initialize supplementary groups | Martin Willi | 2013-03-01 | 1 | -1/+37 | |
| | ||||||
* | Add a global return_success() method implementation | Martin Willi | 2013-02-14 | 2 | -0/+13 | |
| | ||||||
* | Merge branch 'pt-tls' | Martin Willi | 2013-02-14 | 1 | -0/+5 | |
|\ | ||||||
| * | Add a chunk_from_str() initializer that does not include 0-terminator | Martin Willi | 2013-01-15 | 1 | -0/+5 | |
| | | ||||||
* | | time is a time_t pointer | Andreas Steffen | 2013-02-04 | 1 | -1/+1 | |
|/ | ||||||
* | Replace optionsfrom LGPLv2 header by a GPLv2 | Martin Willi | 2012-11-30 | 1 | -7/+7 | |
| | ||||||
* | Moved utils.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 5 | -3/+1272 | |
| | ||||||
* | Moved settings_t to utils folder | Tobias Brunner | 2012-10-24 | 2 | -0/+1540 | |
| |