Michael Rash f4c16bc47f [server] Stronger IP validation based on a bug found by Fernando Arnaboldi from IOActive ...

This commit fixes a condition in which the server did not properly validate
allow IP addresses from malicious authenticated clients.  This has been fixed
with stronger allow IP validation.

2012-08-25 23:08:55 -04:00

..

base64.c

…

base64.h

…

cipher_funcs.c

convert Rijndael blocksize values '16' to use RIJNDAEL_BLOCKSIZE macro

2012-01-15 15:57:45 -05:00

cipher_funcs.h

Replay attack bug fix (encryption prefixes)

2012-08-01 21:52:56 -04:00

digest.c

…

digest.h

…

fko_client_timeout.c

…

fko_common.h

Better SPA message validation upon SPA decrypt/decode.

2012-07-21 15:32:15 -04:00

fko_context.h

Merge branch 'master' of ssh://github.com/mrash/fwknop

2012-07-14 10:14:05 -04:00

fko_decode.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_digest.c

Bug fix for multi-stanza key use and replay attack detection

2012-07-07 21:31:30 -04:00

fko_encode.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_encryption.c

Implemented server-side bounds checking on inccoming SPA data.

2012-07-19 22:34:45 -04:00

fko_error.c

…

fko_funcs.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_limits.h

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_message.c

[server] Stronger IP validation based on a bug found by Fernando Arnaboldi from IOActive

2012-08-25 23:08:55 -04:00

fko_message.h

(Fernando Arnaboldi, IOActive) Found and fixed several DoS/code execution vulns for authenticated clients

2012-08-24 22:12:19 -04:00

fko_nat_access.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_rand_value.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_server_auth.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_state.h

…

fko_timestamp.c

…

fko_user.c

[libfko] minor memory leak fix for user detection (corner case)

2012-07-30 22:34:15 -04:00

fko_util.h

…

fko.h

bumped version to 2.0.2-pre1

2012-08-03 22:16:22 -04:00

gpgme_funcs.c

Added gpg validity check. Tweak to rpm spec file.

2012-07-14 10:13:26 -04:00

gpgme_funcs.h

…

Makefile.am

Better SPA message validation upon SPA decrypt/decode.

2012-07-21 15:32:15 -04:00

md5.c

…

md5.h

…

rijndael.c

…

rijndael.h

…

sha1.c

…

sha1.h

…

sha2.c

…

sha2.h

…

strlcat.c

…

strlcpy.c

…