Michael Rash be904769c4 [libfko] Bug fix to not decrypt with GnuGP without FKO_ENC_MODE_ASYMMETRIC ...

[libfko] Bug fix to not attempt SPA packet decryption with GnuPG without
an fko object with encryption_mode set to FKO_ENC_MODE_ASYMMETRIC.  This
bug was caught with valgrind validation against the perl FKO extension
together with the set of SPA fuzzing packets in
test/fuzzing/fuzzing_spa_packets.  Note that this bug cannot be
triggered via fwknopd because additional checks are made within fwknopd
itself to force FKO_ENC_MODE_ASYMMETRIC whenever an access.conf stanza
contains GPG key information.  This fix strengthens libfko itself to
independently require that the usage of fko objects without GPG key
information does not result in attempted GPG decryption operations.  Hence
this fix applies mostly to third party usage of libfko - i.e. stock
installations of fwknopd are not affected.  As always, it is recommended to
use HMAC authenticated encryption whenever possible even for GPG modes since
this also provides a work around even for libfko prior to this fix.

2013-11-26 08:35:16 -05:00

..

base64.c

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

base64.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

cipher_funcs.c

[libfko] move is_base64 check to libfko

2013-11-16 19:20:08 -05:00

cipher_funcs.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

digest.c

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

digest.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

fko_client_timeout.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_common.h

Tweaks to unbreak the windows build: Renamed FD_SET macro to FD_SET_ALT to avoid conflict with the well-known FD_SET macro. Made the client read password from file descriptor a non-supported function on Windows.

2013-07-17 22:46:24 -04:00

fko_context.h

continued zeroing out of sensitive data buffers in support of issue #93

2013-07-08 23:00:18 -04:00

fko_decode.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_digest.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_encode.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_encryption.c

[libfko] Bug fix to not decrypt with GnuGP without FKO_ENC_MODE_ASYMMETRIC

2013-11-26 08:35:16 -05:00

fko_error.c

[libfko] bug fix caught by new code structure error str test to add string for FKO_ERROR_INVALID_DATA_DECODE_EXTRA_TOOBIG

2013-11-16 23:23:32 -05:00

fko_funcs.c

Revert "[test suite] minor Test::Valgrind name typo fix"

2013-10-22 20:36:30 -04:00

fko_hmac.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_limits.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

fko_message.c

[libfko] implemented shared utility function for ipv4 address checking

2013-11-20 17:13:55 -05:00

fko_message.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

fko_nat_access.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_rand_value.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_server_auth.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_state.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

fko_timestamp.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_user.c

Add unique errors for every FKO_ERROR_INVALID_DATA. Needed this to

2013-08-05 22:21:10 -04:00

fko_user.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

fko_util.c

[libfko] implemented shared utility function for ipv4 address checking

2013-11-20 17:13:55 -05:00

fko_util.h

[libfko] implemented shared utility function for ipv4 address checking

2013-11-20 17:13:55 -05:00

fko.h

[libfko] move is_base64 check to libfko

2013-11-16 19:20:08 -05:00

gpgme_funcs.c

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

gpgme_funcs.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

hmac.c

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

hmac.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

Makefile.am

[libfko] set version-info to 2:0:0 per Damien and Franck's recommendations

2013-07-19 20:33:38 -04:00

md5.c

various sizeof() usage and type bug fixes found by Coverity

2013-05-09 21:17:27 -04:00

md5.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

rijndael.c

minor ChangeLog text tweaks and one typo fix

2013-07-17 23:34:37 -04:00

rijndael.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

sha1.c

Fix byte order warning

2013-03-03 14:29:08 -05:00

sha1.h

s/GNU Public/GNU General Public/g

2013-06-30 22:21:22 +02:00

sha2.c

[libfko] fixed remaining sizeof() usage bug in SHA256 code found by Coverity

2013-05-09 22:14:06 -04:00

sha2.h

interim commit for supporting multiple HMAC digest types (# 45)

2013-03-07 23:14:48 -05:00

strlcat.c

[libfko] Candidate build fix for Mac OS X 10.9 (closes #108)

2013-11-12 21:36:14 -05:00

strlcpy.c

[libfko] Candidate build fix for Mac OS X 10.9 (closes #108)

2013-11-12 21:36:14 -05:00