Michael Rash ac38f8d993 [libfko] bug fix to check b64_decode() return value ...

Bug fix to check b64_decode() return value to ensure that
non-base64 encoded data is never used.  Even though other validation
routines checked decoded results, it is important to discard invalid
data as early as possible.  Note too that such invalid data would only
be provided to b64_decode() after proper decryption, so the client must
provide authentic SPA data.

2012-10-26 15:36:08 -04:00

..

base64.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

base64.h

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

cipher_funcs.c

convert Rijndael blocksize values '16' to use RIJNDAEL_BLOCKSIZE macro

2012-01-15 15:57:45 -05:00

cipher_funcs.h

Replay attack bug fix (encryption prefixes)

2012-08-01 21:52:56 -04:00

digest.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

digest.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

fko_client_timeout.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fko_common.h

added libfko validate_username() for decrypted SPA data

2012-10-18 23:01:54 -04:00

fko_context.h

Merge branch 'master' of ssh://github.com/mrash/fwknop

2012-07-14 10:14:05 -04:00

fko_decode.c

[libfko] bug fix to check b64_decode() return value

2012-10-26 15:36:08 -04:00

fko_digest.c

Bug fix for multi-stanza key use and replay attack detection

2012-07-07 21:31:30 -04:00

fko_encode.c

added validate_username() call to SPA packet encoding routine

2012-10-22 20:31:31 -04:00

fko_encryption.c

[libfko] bug fix to check b64_decode() return value

2012-10-26 15:36:08 -04:00

fko_error.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fko_funcs.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_limits.h

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_message.c

[libfko] validation of NAT access strings

2012-10-15 20:52:23 -04:00

fko_message.h

[libfko] validation of NAT access strings

2012-10-15 20:52:23 -04:00

fko_nat_access.c

[libfko] validation of NAT access strings

2012-10-15 20:52:23 -04:00

fko_rand_value.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_server_auth.c

replace strlen() calls with strnlen() and appropriate maximums

2012-07-22 23:13:39 -04:00

fko_state.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

fko_timestamp.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fko_user.c

added libfko validate_username() for decrypted SPA data

2012-10-18 23:01:54 -04:00

fko_user.h

added libfko validate_username() for decrypted SPA data

2012-10-18 23:01:54 -04:00

fko_util.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

fko.h

bump version to 2.0.3

2012-09-03 22:23:48 -04:00

gpgme_funcs.c

Added gpg validity check. Tweak to rpm spec file.

2012-07-14 10:13:26 -04:00

gpgme_funcs.h

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

Makefile.am

added libfko validate_username() for decrypted SPA data

2012-10-18 23:01:54 -04:00

md5.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

md5.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

rijndael.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

rijndael.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sha1.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sha1.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sha2.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sha2.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

strlcat.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

strlcpy.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00