DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity
Files
4832312e6de8401ac6fdbe63014ef7f186cf33cb
fwknop/lib
History
Michael Rash f4c16bc47f [server] Stronger IP validation based on a bug found by Fernando Arnaboldi from IOActive 
This commit fixes a condition in which the server did not properly validate
allow IP addresses from malicious authenticated clients.  This has been fixed
with stronger allow IP validation.
2012-08-25 23:08:55 -04:00
..
base64.c
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
base64.h
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
cipher_funcs.c
convert Rijndael blocksize values '16' to use RIJNDAEL_BLOCKSIZE macro
2012-01-15 15:57:45 -05:00
cipher_funcs.h
Replay attack bug fix (encryption prefixes)
2012-08-01 21:52:56 -04:00
digest.c
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
digest.h
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
fko_client_timeout.c
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
fko_common.h
Better SPA message validation upon SPA decrypt/decode.
2012-07-21 15:32:15 -04:00
fko_context.h
Merge branch 'master' of ssh://github.com/mrash/fwknop
2012-07-14 10:14:05 -04:00
fko_decode.c
replace strlen() calls with strnlen() and appropriate maximums
2012-07-22 23:13:39 -04:00
fko_digest.c
Bug fix for multi-stanza key use and replay attack detection
2012-07-07 21:31:30 -04:00
fko_encode.c
replace strlen() calls with strnlen() and appropriate maximums
2012-07-22 23:13:39 -04:00
fko_encryption.c
Implemented server-side bounds checking on inccoming SPA data.
2012-07-19 22:34:45 -04:00
fko_error.c
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
fko_funcs.c
replace strlen() calls with strnlen() and appropriate maximums
2012-07-22 23:13:39 -04:00
fko_limits.h
replace strlen() calls with strnlen() and appropriate maximums
2012-07-22 23:13:39 -04:00
fko_message.c
[server] Stronger IP validation based on a bug found by Fernando Arnaboldi from IOActive
2012-08-25 23:08:55 -04:00
fko_message.h
(Fernando Arnaboldi, IOActive) Found and fixed several DoS/code execution vulns for authenticated clients
2012-08-24 22:12:19 -04:00
fko_nat_access.c
replace strlen() calls with strnlen() and appropriate maximums
2012-07-22 23:13:39 -04:00
fko_rand_value.c
replace strlen() calls with strnlen() and appropriate maximums
2012-07-22 23:13:39 -04:00
fko_server_auth.c
replace strlen() calls with strnlen() and appropriate maximums
2012-07-22 23:13:39 -04:00
fko_state.h
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
fko_timestamp.c
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
fko_user.c
[libfko] minor memory leak fix for user detection (corner case)
2012-07-30 22:34:15 -04:00
fko_util.h
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
fko.h
bumped version to 2.0.2-pre1
2012-08-03 22:16:22 -04:00
gpgme_funcs.c
Added gpg validity check. Tweak to rpm spec file.
2012-07-14 10:13:26 -04:00
gpgme_funcs.h
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
Makefile.am
Better SPA message validation upon SPA decrypt/decode.
2012-07-21 15:32:15 -04:00
md5.c
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
md5.h
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
rijndael.c
added 'const' to function prototype vars where possible
2011-10-25 21:00:40 -04:00
rijndael.h
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
sha1.c
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
sha1.h
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
sha2.c
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
sha2.h
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
strlcat.c
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00
strlcpy.c
Removed legacy $Id$ tags from svn
2011-06-18 20:53:40 -04:00