Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Use exact mask when calling umask(2) | Tobias Brunner | 2013-10-29 | 1 | -1/+1 | |
| | | | | | | Due to the previous negation the high bits of the mask were set, which at least some versions of the Android build system prevent with a compile-time check. | |||||
* | Fixed some typos | Tobias Brunner | 2013-10-29 | 1 | -1/+1 | |
| | ||||||
* | utils: Fix check for fmemopen() fallback implementation | Martin Willi | 2013-10-24 | 2 | -2/+3 | |
| | ||||||
* | unit-tests: Set sa_len in sockaddr template data, if required | Martin Willi | 2013-10-24 | 1 | -0/+6 | |
| | ||||||
* | printf-hook-builtin: Don't rely on isinf() return value signedness | Martin Willi | 2013-10-24 | 1 | -8/+9 | |
| | | | | | Many systems don't return a negative value for negative infinities; so do a separate check. | |||||
* | watcher: Rebuild fdset when select() fails | Martin Willi | 2013-10-24 | 1 | -1/+12 | |
| | | | | | | This should make sure we refresh the fdset if a user closes an FD it just removed. Some selects() seem to complain about the bad FD before signaling the notification pipe. | |||||
* | rwlock: Disable thread cancelability while waiting in (fallback) rwlock | Martin Willi | 2013-10-24 | 1 | -0/+7 | |
| | | | | | | An rwlock wait is not a thread cancellation point. As a canceled thread would not have released the mutex, the rwlock would have been left in unusable state. | |||||
* | rwlock: Don't use buggy pthread_rwlock on OS X | Martin Willi | 2013-10-24 | 1 | -0/+7 | |
| | | | | Recursive read locks don't seem to work properly, at least on 10.9. | |||||
* | utils: Provide a fmemopen(3) fallback using BSD funopen() | Martin Willi | 2013-10-24 | 2 | -0/+61 | |
| | ||||||
* | pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOB | Tobias Brunner | 2013-10-23 | 4 | -64/+12 | |
| | | | | This allows more than one builder to try parsing the data read from STDIN. | |||||
* | chunk: Add helper function to create a chunk from data read from a file ↵ | Tobias Brunner | 2013-10-23 | 2 | -0/+40 | |
| | | | | descriptor | |||||
* | semaphore: Support cancellation in wait functions of semaphore fallback | Martin Willi | 2013-10-23 | 1 | -4/+6 | |
| | | | | | Semaphore wait functions should be a thread cancellation point, but did not properly release the mutex in the fallback implementation. | |||||
* | rwlock: Re-acquire rwlock even if condvar wait times out | Martin Willi | 2013-10-23 | 1 | -1/+1 | |
| | | | | | A caller expects that the associated rwlock is held, whether the condvar gets signaled or the wait times out. | |||||
* | traffic-selector: Print ICMP[v6] message type and code in a more readable way | Tobias Brunner | 2013-10-17 | 1 | -4/+35 | |
| | ||||||
* | traffic-selector: Store ICMP[v6] message type and code properly | Tobias Brunner | 2013-10-17 | 2 | -8/+70 | |
| | | | | We now store them as defined in RFC 4301, section 4.4.1.1. | |||||
* | traffic-selector: Move class to its own Doxygen group | Tobias Brunner | 2013-10-17 | 2 | -1/+4 | |
| | ||||||
* | openssl: Add workaround if ECC Brainpool curves are not defined | Tobias Brunner | 2013-10-17 | 1 | -11/+247 | |
| | ||||||
* | openssl: Add support for ECC Brainpool curves for DH, if defined by OpenSSL | Tobias Brunner | 2013-10-17 | 2 | -6/+51 | |
| | | | | OpenSSL does not include them in releases before 1.0.2. | |||||
* | ecc: Added ECC Brainpool ECDH groups as registered with IANA | Andreas Steffen | 2013-10-17 | 3 | -3/+20 | |
| | ||||||
* | unit-tests: Make test for bio_writer_t more portable | Tobias Brunner | 2013-10-17 | 1 | -2/+8 | |
| | ||||||
* | utils: Add utility function to calculate padding length | Tobias Brunner | 2013-10-17 | 2 | -13/+24 | |
| | ||||||
* | Doxygen fixes | Tobias Brunner | 2013-10-15 | 1 | -1/+1 | |
| | ||||||
* | Revert refactoring which broke CentOS build | Andreas Steffen | 2013-10-13 | 1 | -1/+1 | |
| | ||||||
* | ccm: Add missing comma in get_iv_gen method signature | Tobias Brunner | 2013-10-11 | 1 | -1/+1 | |
| | ||||||
* | iv-gen: Add missing header files to Makefile.am | Tobias Brunner | 2013-10-11 | 1 | -0/+1 | |
| | ||||||
* | iv_gen: Mask sequential IVs with a random salt | Tobias Brunner | 2013-10-11 | 1 | -0/+24 | |
| | | | | | This makes it harder to attack a HA setup, even if the sequence numbers were not fully in sync. | |||||
* | iv_gen: Provide external sequence number (IKE, ESP) | Tobias Brunner | 2013-10-11 | 3 | -17/+10 | |
| | | | | This prevents duplicate sequential IVs in case of a HA failover. | |||||
* | iv_gen: aead_t implementations provide an IV generator | Tobias Brunner | 2013-10-11 | 5 | -1/+76 | |
| | ||||||
* | iv_gen: Add IV generator that allocates IVs sequentially | Tobias Brunner | 2013-10-11 | 4 | -2/+121 | |
| | ||||||
* | iv_gen: Add IV generator that allocates IVs randomly | Tobias Brunner | 2013-10-11 | 4 | -0/+113 | |
| | | | | Uses RNG_WEAK as the code currently does elsewhere to allocate IVs. | |||||
* | crypto: Add generic interface for IV generators | Tobias Brunner | 2013-10-11 | 2 | -1/+60 | |
| | ||||||
* | apidoc: Move mac_prf to prf Doxygen group | Tobias Brunner | 2013-10-11 | 1 | -1/+1 | |
| | ||||||
* | unbound: Add support for DLV (DNSSEC Lookaside Validation) | Tobias Brunner | 2013-10-11 | 1 | -12/+23 | |
| | | | | Fixes #392. | |||||
* | ipsec_types: Add utility function to parse mark_t from strings | Tobias Brunner | 2013-10-11 | 3 | -2/+95 | |
| | ||||||
* | database: Add support for serializable transactions | Tobias Brunner | 2013-10-11 | 3 | -5/+23 | |
| | ||||||
* | sqlite: Implement transaction handling | Tobias Brunner | 2013-10-11 | 1 | -6/+83 | |
| | ||||||
* | mysql: Implement transaction handling | Tobias Brunner | 2013-10-11 | 1 | -7/+119 | |
| | ||||||
* | database: Add interface to handle transactions | Tobias Brunner | 2013-10-11 | 3 | -1/+76 | |
| | ||||||
* | mysql: Ensure connections are properly released in multi-threaded environments | Tobias Brunner | 2013-10-11 | 1 | -14/+23 | |
| | ||||||
* | crypto-factory: Try next available RNG implementation if constructor fails | Tobias Brunner | 2013-10-11 | 1 | -13/+6 | |
| | ||||||
* | crypto-factory: Order entries by algorithm identifier and (optionally) speed | Tobias Brunner | 2013-10-11 | 1 | -22/+18 | |
| | ||||||
* | Remove HASH_PREFERRED, usages are replaced with HASH_SHA1, which is required ↵ | Tobias Brunner | 2013-10-11 | 7 | -24/+16 | |
| | | | | for IKEv2 anyway | |||||
* | vstr: Forward actual field width | Tobias Brunner | 2013-10-11 | 1 | -1/+1 | |
| | | | | | fmt_field_width is a flag that indicates if a field width is defined in obj_field_width. | |||||
* | unit-tests: support testing when leak-detective has not been enabled | Martin Willi | 2013-10-11 | 1 | -5/+14 | |
| | ||||||
* | printf-hook-builtin: Print NaN/Infinity floating point values as such | Martin Willi | 2013-10-11 | 2 | -2/+36 | |
| | ||||||
* | printf-hook-builtin: Correctly round up floating point values | Martin Willi | 2013-10-11 | 2 | -9/+43 | |
| | ||||||
* | printf-hook-builtin: Add some preliminary floating point support | Martin Willi | 2013-10-11 | 2 | -2/+223 | |
| | | | | | This minimalistic implementation has no aspiration for completeness or accuracy, and just provides what we need. | |||||
* | printf-hook-builtin: Support GNU %m specifier | Martin Willi | 2013-10-11 | 2 | -0/+21 | |
| | ||||||
* | printf-hook-builtin: Add a new "builtin" backend using its own printf() routines | Martin Willi | 2013-10-11 | 4 | -1/+1025 | |
| | | | | | | Overloads printf C library functions by a self-contained implementation, based on klibc. Does not yet feature all the required default formatters, including those for floating point values. | |||||
* | printf-hook: Add some basic printf() string/integer test functions | Martin Willi | 2013-10-11 | 4 | -1/+112 | |
| |