Michael Rash add2c913ab [libfko] fix double free bug in SPA parser ...

This commit fixes a double free condition discovered through the new
python SPA payload fuzzer.  This bug could be triggered in fwknopd with
a malicious SPA payload but only when GnuPG is used.  When Rijndael is
used for SPA packet encryption, this bug cannot be triggered due to an
length/format check towards the end of _rijndael_decrypt().  It should
be noted that only a person in possession of the correct encryption and
authentication GnuPG keys could trigger this bug.

2014-04-26 23:26:36 -04:00

..

base64.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

base64.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

cipher_funcs.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

cipher_funcs.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

digest.c

[libfko] remove unused digest *_End(), *_Data(), and *_hex() functions in favor of better test coverage (always can be reinstantiated if needed)

2014-04-04 22:54:38 -04:00

digest.h

[libfko] remove unused digest *_End(), *_Data(), and *_hex() functions in favor of better test coverage (always can be reinstantiated if needed)

2014-04-04 22:54:38 -04:00

fko_client_timeout.c

[libfko] minor comment re-wording

2014-04-08 21:06:45 -04:00

fko_common.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_context.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_decode.c

[libfko] fix double free bug in SPA parser

2014-04-26 23:26:36 -04:00

fko_digest.c

replace malloc() with calloc() calls

2014-03-15 22:02:57 -04:00

fko_encode.c

[libfko] fix memory leak in fko_encode_spa_data() caught by Coverity

2014-03-27 21:21:17 -04:00

fko_encryption.c

[server] Validate GPG sigs with libfko fko_gpg_signature_id_match() function

2014-04-09 23:56:03 -04:00

fko_error.c

[libfko] per-SPA message type field count validation

2014-03-16 21:47:19 -04:00

fko_funcs.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_hmac.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_limits.h

[libfko] per-SPA message type field count validation

2014-03-16 21:47:19 -04:00

fko_message.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_message.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_nat_access.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_rand_value.c

replace malloc() with calloc() calls

2014-03-15 22:02:57 -04:00

fko_server_auth.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_state.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_timestamp.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_user.c

Merge branch 'ms_compatible_usernames'

2014-03-14 23:02:47 -04:00

fko_user.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fko_util.c

[libfko] minor formating update for strtol_wrapper() range output messages

2014-04-08 21:08:24 -04:00

fko_util.h

[libfko] add digest verification and length fcns to decode routine

2014-03-15 21:37:30 -04:00

fko.h

[libfko] per-SPA message type field count validation

2014-03-16 21:47:19 -04:00

gpgme_funcs.c

replace malloc() with calloc() calls

2014-03-15 22:02:57 -04:00

gpgme_funcs.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

hmac.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

hmac.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

Makefile.am

Bumped libfko and protocol versions to 2.0.1. Added dependencies for this version to the fwknop.spec file.

2014-01-11 10:58:01 -05:00

md5.c

various sizeof() usage and type bug fixes found by Coverity

2013-05-09 21:17:27 -04:00

md5.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

rijndael.c

minor ChangeLog text tweaks and one typo fix

2013-07-17 23:34:37 -04:00

rijndael.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

sha1.c

Fix byte order warning

2013-03-03 14:29:08 -05:00

sha1.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

sha2.c

[libfko] remove unused digest *_End(), *_Data(), and *_hex() functions in favor of better test coverage (always can be reinstantiated if needed)

2014-04-04 22:54:38 -04:00

sha2.h

[libfko] remove unused digest *_End(), *_Data(), and *_hex() functions in favor of better test coverage (always can be reinstantiated if needed)

2014-04-04 22:54:38 -04:00

strlcat.c

[libfko] Candidate build fix for Mac OS X 10.9 (closes #108)

2013-11-12 21:36:14 -05:00

strlcpy.c

[libfko] Candidate build fix for Mac OS X 10.9 (closes #108)

2013-11-12 21:36:14 -05:00