Michael Rash
8bab3cfbe3
[test suite] exercise free_cycle_list_node()
2015-12-15 11:26:29 -08:00
Michael Rash
c987d91821
[test suite] attempt to account for systems that may run slowly (embedded systems, etc.)
2015-12-15 00:02:23 -08:00
Michael Rash
42fd4d6afa
[test suite] additional FORCE_NAT code coverage
2015-12-14 22:39:57 -08:00
Michael Rash
48ecba25d5
[test suite] asan vs. ubsan bug fix
2015-12-14 18:51:03 -08:00
Michael Rash
98e79396ce
[test suite] start on --access-folder include dir test
2015-12-13 02:24:30 -08:00
Michael Rash
d8dc1fcdee
[server] add is_valid_file() function, default to lstat() instead of stat(), more %include_folder tests
2015-12-13 01:39:29 -08:00
Michael Rash
b305f67ca5
[test suite] start on %include_folder tests, make sure at least one valid access.conf stanza has been parsed
2015-12-12 20:39:37 -08:00
Michael Rash
f2e6b6cc68
[server] fix directory handle leak in failure condition, switch to strlcpy and strlcat for %include folder parsing
2015-12-12 12:30:24 -08:00
Michael Rash
ba3d16c5e3
[test suite] complete cycle test from %include derived access stanza
2015-12-12 11:19:14 -08:00
Michael Rash
c12ecd092a
[test suite] interleaved access.conf %include tests
2015-12-12 06:45:39 -08:00
Michael Rash
bcd0a90a18
[test suite] %include missing key test
2015-12-12 06:32:14 -08:00
Michael Rash
9c92a368fe
[test suite] access.conf %include missing file
2015-12-12 06:27:47 -08:00
Michael Rash
7757929624
[test suite] multi-include non-recursive access.conf test
2015-12-12 06:23:16 -08:00
Michael Rash
66458dfa49
[server] exit before writing pid file in --exit-parse-config mode
2015-12-12 06:22:40 -08:00
Michael Rash
b65d766d80
[server] minor change to use MAX_DEPTH
2015-12-12 06:06:33 -08:00
Michael Rash
5b0cfb16a0
[test suite] add access.conf %include recursion limit test
2015-12-10 15:31:18 -08:00
Michael Rash
e27e92d827
Merge branch 'master' into access_conf_includes
2015-12-10 15:01:29 -08:00
Jonathan Bennett
f7667239e6
Add documentation for the --access-folder command line option
2015-12-10 17:41:43 -06:00
Michael Rash
d70e3f3fbb
[fko-wrapper] add 'usban' compilation directive
2015-12-10 14:36:14 -08:00
Michael Rash
885b8c3a09
[test suite] consolidate *Sanitizer crash detection in a single function
2015-12-10 14:35:46 -08:00
Michael Rash
f0269751e6
[test suite] fix FORCE_SNAT tests
2015-12-10 14:34:35 -08:00
Michael Rash
75b059af76
[test suite] use killall to ensure fwknopd is stopped between tests
2015-12-10 14:33:51 -08:00
Michael Rash
4cab37acf9
[test suite] client --time-offset code coverage
2015-12-10 14:32:30 -08:00
Jonathan Bennett
a0c4acd31c
Adds the --access-folder command line option
2015-12-10 12:45:28 -06:00
Jonathan Bennett
186101d298
Add the %include_folder directive
2015-12-10 11:16:50 -06:00
Michael Rash
d509925822
[extras] add build support for Google's UndefinedBehaviorSanitizer
2015-12-09 18:19:42 -08:00
Michael Rash
60919a9141
[test suite] make ASan error detection more generic to catch things like LeakSanitizer errors
2015-12-09 17:16:38 -08:00
Michael Rash
0c455ebf9c
[test suite] ensure fko-wrapper passes 16-byte string to fko_set_rand_value()
2015-12-09 17:15:48 -08:00
Jonathan Bennett
abad765212
Only initialize the access stanze data on the root access.conf file.
2015-12-09 00:13:53 -06:00
Michael Rash
ae1e804ea1
[test suite] add test for access.conf include directive
2015-12-08 19:51:51 -08:00
Michael Rash
947dbfe6ae
Merge branch 'master' into access_conf_includes
2015-12-08 19:04:32 -08:00
Michael Rash
95383149cb
[server] bug fix to honor CMD_EXEC_USER and CMD_SUDO_EXEC_USER vars
2015-12-08 19:01:53 -08:00
Michael Rash
3e3bf0d122
Merge branch 'master' into accesss_conf_includes
2015-12-07 18:18:27 -08:00
Michael Rash
4f81dd7747
[server] local NAT should not be enabled by default
2015-12-07 16:51:19 -08:00
Michael Rash
35558097cc
[test suite] fix FORCE_NAT and FORCE_SNAT required server regex matches
2015-12-05 16:07:01 -08:00
Michael Rash
a8ec29affa
[server] minor cleanup for incoming SPA packet processing
2015-12-05 16:06:25 -08:00
Michael Rash
51c0efb665
[test suite] minor var addition for Rijndael key existence test
2015-12-05 07:00:24 -08:00
Michael Rash
b6674aba6f
[server] allow ENABLE_IPT_LOCAL_NAT to enable FORCE_NAT features
2015-12-05 06:05:58 -08:00
Michael Rash
2c74372a4e
[test suite] fix fko_set_username_strdup fault injection test
2015-12-05 05:50:39 -08:00
Michael Rash
793813e8ef
[test suite] add missing coverage report to coverage_diff.py
2015-12-05 05:46:10 -08:00
Michael Rash
044ebf5e73
[test suite] add -O and -N to coverage diff'ing utility
2015-12-05 05:36:51 -08:00
Michael Rash
988075b52b
[server] bug fix to honor client timeout SPA messages in --nat-local mode, fixes #173
2015-12-04 19:36:51 -08:00
Michael Rash
d4ca18dae6
[test suite] more comprehensive code coverage driven by fko-wrapper
2015-12-04 19:04:23 -08:00
Michael Rash
f89af3b8c1
add libfko fko_set_username() crash ChangeLog message
2015-12-04 19:03:22 -08:00
Michael Rash
21149faf89
[libfko] fko_set_username() crash bug fix.
...
Bug fix for a crash in libfko that could be triggered in fko_set_username()
when a username that is 64 chars or longer is specified. This crash
cannot be triggered in fwknopd even if an SPA packet contains such a
username however due to additional protections in the SPA decoding
routines. Further, this bug does not apply to the main fwknop client
either because the maximal username size is truncated down below 64
bytes. Hence, this bug only applies to client-side software that is
directly using libfko calling the fko_set_username() function.
2015-12-04 19:01:26 -08:00
Michael Rash
a000bcd4a0
[client] minor formatting update
2015-12-04 18:49:24 -08:00
Jonathan Bennett
c3d50a9503
Unwind the recursive access.conf properly on an error
...
and remove a debugging log message.
2015-12-04 18:34:09 -06:00
Jonathan Bennett
1e34a3430c
Add access.conf %include depth tracking
2015-12-04 18:16:57 -06:00
Jonathan Bennett
ce0b7f6727
Initial work on access.conf includes
2015-12-03 23:23:42 -06:00
Michael Rash
c67008b6a8
minor fault injection tag rework for fko_set_rand_value() and fko_set_username()
2015-11-30 12:28:59 -08:00
