Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | unit-tests: Add a thread cleanup pop test | Martin Willi | 2013-11-06 | 1 | -0/+33 | |
| | ||||||
* | unit-tests: Add cleanup test cases for different thread exit situations | Martin Willi | 2013-11-06 | 1 | -0/+126 | |
| | ||||||
* | unit-tests: Add a test for thread_cancellation_point() | Martin Willi | 2013-11-06 | 1 | -0/+33 | |
| | ||||||
* | unit-tests: Add thread cancellability testing | Martin Willi | 2013-11-06 | 1 | -0/+50 | |
| | ||||||
* | unit-tests: Add a simple thread_cancel() test | Martin Willi | 2013-11-06 | 1 | -0/+35 | |
| | ||||||
* | unit-tests: Add thread_exit() tests to both join and detach test cases | Martin Willi | 2013-11-06 | 1 | -0/+62 | |
| | ||||||
* | unit-tests: Add a simple thread detach test | Martin Willi | 2013-11-06 | 1 | -0/+36 | |
| | ||||||
* | unit-tests: Add a simple thread join() test | Martin Willi | 2013-11-06 | 1 | -0/+27 | |
| | ||||||
* | unit-tests: Add test suite for streams and services | Martin Willi | 2013-11-06 | 4 | -0/+270 | |
| | ||||||
* | unit-tests: Add a few test cases for watcher | Martin Willi | 2013-11-06 | 4 | -0/+217 | |
| | ||||||
* | unit-tests: Support testing multi-threaded code | Martin Willi | 2013-11-06 | 2 | -7/+49 | |
| | ||||||
* | unit-tests: Use a home-brew thread barrier to remove pthread dependency | Martin Willi | 2013-11-06 | 1 | -15/+86 | |
| | ||||||
* | unit-tests: Show how many test vectors have failed on test failure | Martin Willi | 2013-11-06 | 1 | -1/+2 | |
| | ||||||
* | unit-tests: Skip fmemopen() based printf() tests if not available | Martin Willi | 2013-11-06 | 1 | -7/+12 | |
| | ||||||
* | unit-tests: Avoid name clash with clone() from <sched.h> | Martin Willi | 2013-11-06 | 1 | -6/+6 | |
| | ||||||
* | unit-tests: Fix a compiler warning in identification tests | Martin Willi | 2013-11-06 | 1 | -1/+1 | |
| | ||||||
* | unit-tests: Clean up memory in new asn1 unit tests | Martin Willi | 2013-11-06 | 1 | -1/+3 | |
| | | | | Test runner checks for leaks when leak detective is enabled. | |||||
* | unit-tests: Pass linked_list->invoke* varargs as uintptr_t | Martin Willi | 2013-11-06 | 1 | -6/+10 | |
| | | | | | | Passing integers of unspecified length may result in passing an integer shorter than uintptr_t. When reading them back, we might get more data than passed, resulting in a failure. | |||||
* | unit-tests: Initialize backtracing before printing any backtraces | Martin Willi | 2013-11-06 | 1 | -0/+4 | |
| | ||||||
* | thread: Note that tread_cancellation_point temporarily activates cancelability | Martin Willi | 2013-11-06 | 1 | -5/+4 | |
| | ||||||
* | backtrace: Support backtracing even if library is not initialized | Martin Willi | 2013-11-06 | 1 | -2/+2 | |
| | | | | But of course backtracing must be initialized anyway using backtrace_init(). | |||||
* | unit-tests: Enable libstrongswan tests even if --enable-unit-tests not set | Martin Willi | 2013-11-06 | 1 | -3/+1 | |
| | | | | | | As we don't depend on the check framework anymore, we can enable the unit tests by default. These are built/executed with "make check" only, so it makes no sense to disable them. | |||||
* | unit-tests: Implement testing framework without "check" | Martin Willi | 2013-11-06 | 5 | -113/+956 | |
| | ||||||
* | leak-detective: Call {gm,local}time_r() to allocate static buffer | Martin Willi | 2013-11-06 | 1 | -0/+5 | |
| | | | | | On OS X Mavericks, these functions use a static allocation and are hard to whitelist using other means. | |||||
* | leak-detective: Register OS X specific hooks just once | Martin Willi | 2013-11-06 | 1 | -0/+7 | |
| | | | | | If we initialize libstrongswan more than once in the same process, we may not register the hooks twice. | |||||
* | leak-detective: Reset leak list during cleanup | Martin Willi | 2013-11-06 | 1 | -0/+1 | |
| | | | | This resets leak detective state should it get created/destroyed more than once. | |||||
* | leak-detective: Use callback functions to report leaks and usage information | Martin Willi | 2013-11-06 | 5 | -46/+157 | |
| | | | | This is more flexible than printing reports to a FILE. | |||||
* | unit-tests: Move test suites to its own subfolder | Martin Willi | 2013-11-06 | 20 | -8/+22 | |
| | ||||||
* | ikev2: Properly free DH secret in case of errors during IKE key derivation | Tobias Brunner | 2013-11-06 | 1 | -0/+3 | |
| | | | | Fixes #437. | |||||
* | unit-tests: completed asn1_suite | Andreas Steffen | 2013-11-04 | 1 | -33/+55 | |
| | ||||||
* | Updated test_runner.h with new suites | Andreas Steffen | 2013-11-03 | 1 | -0/+2 | |
| | ||||||
* | unit-tests: 100% function coverage for asn1.c | Andreas Steffen | 2013-11-03 | 2 | -6/+286 | |
| | ||||||
* | unit-tests: 12 asn1 functions tested | Andreas Steffen | 2013-11-02 | 3 | -1/+541 | |
| | ||||||
* | Some minor refactoring in asn1.c | Andreas Steffen | 2013-11-02 | 1 | -11/+17 | |
| | ||||||
* | Do not free zero-length integer | Andreas Steffen | 2013-11-02 | 1 | -5/+10 | |
| | ||||||
* | unit-tests: Added tests for pen_type_t | Andreas Steffen | 2013-11-01 | 3 | -1/+89 | |
| | ||||||
* | Added IFOM_CAPABILITY notify message type | Andreas Steffen | 2013-11-01 | 2 | -6/+10 | |
| | ||||||
* | Updated copyright statement | Andreas Steffen | 2013-11-01 | 1 | -5/+7 | |
| | ||||||
* | charon-xpc: Set AUTH_RULE_IDENTITY_LOOSE on responder config | Martin Willi | 2013-11-01 | 1 | -0/+4 | |
| | | | | | This allows the server to use a different IKE identity as long as the configured hostname is contained in the certificate. | |||||
* | ike: Don't immediately DPD after deferred DELETEs following IKE_SA rekeying | Martin Willi | 2013-11-01 | 1 | -0/+8 | |
| | | | | | | | Some peers seem to defer DELETEs a few seconds after rekeying the IKE_SA, which is perfectly valid. For short(er) DPD delays, this leads to the situation where we send a DPD request during set_state(), but the IKE_SA has no hosts set yet. Avoid that DPD by resetting the INBOUND timestamp during set_state(). | |||||
* | ikev1: Properly initialize list of fragments in case fragment ID is 0 | Volker RĂ¼melin | 2013-10-31 | 1 | -1/+1 | |
| | | | | Fixes CVE-2013-6076. | |||||
* | identification: Properly check length before comparing for binary DN equality | Martin Willi | 2013-10-31 | 1 | -1/+1 | |
| | | | | Fixes CVE-2013-6075. | |||||
* | unit-tests: Additionally do reverse match checking with empty identities | Martin Willi | 2013-10-31 | 1 | -0/+55 | |
| | ||||||
* | unit-tests: Test matching against some empty data identities | Martin Willi | 2013-10-31 | 1 | -0/+44 | |
| | ||||||
* | unit-tests: Test for equality against some empty data identities | Martin Willi | 2013-10-31 | 1 | -0/+43 | |
| | ||||||
* | unit-tests: Let identity equality test fail if a->equals(b) != b->equals(a) | Martin Willi | 2013-10-31 | 1 | -1/+1 | |
| | ||||||
* | PB-TNC PDP_REFERRAL message doesn't have to be in RESULT batch | Andreas Steffen | 2013-10-31 | 1 | -1/+1 | |
| | ||||||
* | updown: fix segfault when interface name can't be resolved | Ansis Atteka | 2013-10-30 | 1 | -0/+4 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The child_updown() function sets up environment variables to the updown script. Sometimes call to hydra->kernel_interface->get_interface() could fail and iface variable could be left uninitialized. This patch fixes this issue by passing "unknown" as interface name. Here is the stacktrace: 0 0x00007fa90791f445 in raise () from /lib/x86_64-linux-gnu/libc.so.6 1 0x00007fa907922bab in abort () from /lib/x86_64-linux-gnu/libc.so.6 2 0x0000000000401ed7 in segv_handler (signal=11) at charon.c:183 3 <signal handler called> 4 0x00007fa90793221f in vfprintf () from /lib/x86_64-linux-gnu/libc.so.6 5 0x00007fa9079f0580 in __vsnprintf_chk () from /lib/x86_64-linux-gnu/libc.so.6 6 0x00007fa9079f04c8 in __snprintf_chk () from /lib/x86_64-linux-gnu/libc.so.6 7 0x00007fa8f9b95b86 in snprintf ( __fmt=0x7fa8f9b961b8 "2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='%s%s%s' PLUTO_CONNECTION='%s' PLUTO_INTERFACE='%s' PLUTO_REQID='%u' PLUTO_ME='%H' PLUTO_MY_ID='%Y' PLUTO_MY_CLIENT='%H/%u' PLUTO_MY_PORT='%u' PLUTO_MY_PROTOCOL='%u"..., __n=1024, __s=0x7fa8f7923440 "2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='up-host' PLUTO_CONNECTION='remote-40.0.0.40' PLUTO_INTERFACE='\367\250\177") at /usr/include/x86_64-linux-gnu/bits/stdio2.h:65 8 child_updown (this=0x8486b0, ike_sa=0x7fa8e4005f80, child_sa=0x7fa8d4008290, up=true) at updown_listener.c:308 9 0x00007fa907ecc11c in ?? () from /usr/lib/strongswan/libcharon.so.0 10 0x00007fa907ef89bf in ?? () from /usr/lib/strongswan/libcharon.so.0 11 0x00007fa907ef2fc8 in ?? () from /usr/lib/strongswan/libcharon.so.0 12 0x00007fa907ee84ff in ?? () from /usr/lib/strongswan/libcharon.so.0 13 0x00007fa907ee3067 in ?? () from /usr/lib/strongswan/libcharon.so.0 14 0x00007fa90835e8fb in ?? () from /usr/lib/strongswan/libstrongswan.so.0 15 0x00007fa908360d30 in ?? () from /usr/lib/strongswan/libstrongswan.so.0 16 0x00007fa907cade9a in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0 17 0x00007fa9079db4bd in clone () from /lib/x86_64-linux-gnu/libc.so.6 18 0x0000000000000000 in ?? () Signed-Off-By: Ansis Atteka <aatteka@nicira.com> | |||||
* | ipsec: Updated ipsec(8) | Tobias Brunner | 2013-10-29 | 2 | -97/+126 | |
| | ||||||
* | ipsec: Remove unused distro.txt | Tobias Brunner | 2013-10-29 | 1 | -2/+0 | |
| |