d46ba1c027
- [server] Fernando Arnaboldi from IOActive found several DoS/code execution vulnerabilities for malicious fwknop clients that manage to get past the authentication stage (so a such a client must be in possession of a valid access.conf encryption key). These vulnerbilities manifested themselves in the handling of malformed access requests, and both the fwknopd server code along with libfko now perform stronger input validation of access request data. These vulnerabilities affect pre-2.0.3 fwknop releases. - [test suite] Added a new fuzzing capability to ensure proper server-side input validation. Fuzzing data is constructed with modified fwknop client code that is designed to emulate malicious behavior.
53 lines
1.7 KiB
C
53 lines
1.7 KiB
C
/*
|
|
******************************************************************************
|
|
*
|
|
* File: access.h
|
|
*
|
|
* Author: Damien Stuart
|
|
*
|
|
* Purpose: Header file for fwknopd access.c.
|
|
*
|
|
* Copyright 2010 Damien Stuart (dstuart@dstuart.org)
|
|
*
|
|
* License (GNU Public License):
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
|
|
* USA
|
|
*
|
|
******************************************************************************
|
|
*/
|
|
#ifndef ACCESS_H
|
|
#define ACCESS_H
|
|
|
|
#define PROTO_TCP 6
|
|
#define PROTO_UDP 17
|
|
|
|
#define ACCESS_BUF_LEN 32
|
|
|
|
/* Function Prototypes
|
|
*/
|
|
void parse_access_file(fko_srv_options_t *opts);
|
|
int compare_addr_list(acc_int_list_t *source_list, const uint32_t ip);
|
|
int acc_check_port_access(acc_stanza_t *acc, char *port_str);
|
|
int acc_check_gpg_remote_id(acc_stanza_t *acc, const char *gpg_id);
|
|
void dump_access_list(const fko_srv_options_t *opts);
|
|
int expand_acc_port_list(acc_port_list_t **plist, char *plist_str);
|
|
void free_acc_stanzas(fko_srv_options_t *opts);
|
|
void free_acc_port_list(acc_port_list_t *plist);
|
|
|
|
#endif /* ACCESS_H */
|
|
|
|
/***EOF***/
|