Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 9dcc56c821 Update Android project configuration and permissions main Denozordec 2026-09-01 15:38:09 +07:00
• 2265fcd1b4 stroke: Avoid underflow when reporting number of SAs Tobias Brunner 2026-08-24 16:21:49 +02:00
• 3b58c67202 charon-tkm: Pass ia and ea ids according to configured proposal mappings Tobias Brunner 2022-05-10 10:56:15 +02:00
• 14fa2d45d8 proposal: Add constructor that does no checks or fixups Tobias Brunner 2022-05-10 14:37:40 +02:00
• ac1dde042a proposal: Add lower case names for protocols Tobias Brunner 2022-05-10 14:26:38 +02:00
• 5011838b32 windows: Avoid potential races with canceling threads Tobias Brunner 2026-07-28 11:51:16 +02:00
• 3934089415 atomics: Add helpers to atomically load/store bools Tobias Brunner 2026-07-28 11:22:23 +02:00
• bf438cb182 vici: Make IKEv2 the default IKE version Tobias Brunner 2026-07-24 16:34:41 +02:00
• e0fd0f51ea configure: Disable IKEv1 support by default Tobias Brunner 2026-07-24 16:24:42 +02:00
• 2f9b52bd1b tnccs-dynamic: Remove unused plugin Tobias Brunner 2026-07-24 15:43:20 +02:00
• ec2a501d8e tnccs-11: Remove legacy TNCCS-1.1 implementation Tobias Brunner 2026-07-24 15:39:06 +02:00
• 1fa33a0631 tnc-ifmap: Remove prototypical IF-MAP plugin Tobias Brunner 2026-07-24 15:33:35 +02:00
• 3a23a56b29 soup: Remove limited fetcher plugin Tobias Brunner 2026-07-24 15:27:12 +02:00
• 7d122d5a98 gcrypt: Remove limited crypto plugin Tobias Brunner 2026-07-24 15:15:30 +02:00
• 248c915593 af-alg: Remove plugin for deprecated AF_ALG interface Tobias Brunner 2026-07-24 15:12:03 +02:00
• 10beab8bcd padlock: Remove legacy hardware crypto plugin Tobias Brunner 2026-07-24 15:06:10 +02:00
• 9f6273786e led: Remove unused plugin Tobias Brunner 2026-07-24 15:03:58 +02:00
• 8b2e60b62b duplicheck: Remove confusing plugin Tobias Brunner 2026-07-24 14:56:13 +02:00
• 67327e9074 blowfish: Remove legacy Blowfish implementation Tobias Brunner 2026-07-24 14:52:13 +02:00
• e535ba99ac android-dns: Remove legacy Android DNS plugin Tobias Brunner 2026-07-24 14:48:23 +02:00
• eb50fd9d15 keychain: Remove unused macOS KeyChain plugin Tobias Brunner 2026-07-24 14:41:43 +02:00
• ceae73cb04 charon-xpc: Remove prototypical macOS application Tobias Brunner 2026-07-24 14:39:18 +02:00
• 60846f24bf libfast: Remove FastCGI application server library Tobias Brunner 2026-07-24 14:31:10 +02:00
• ac690f1a5e medsrv/medcli: Remove prototypical medsrv web application and plugins Tobias Brunner 2026-07-24 14:21:44 +02:00
• 96b0011d30 smp: Remove legacy configuration/control interface Tobias Brunner 2026-07-24 14:15:24 +02:00
• f55bb2b384 manager: Remove legacy PoC manager web application Tobias Brunner 2026-07-24 14:12:16 +02:00
• ea7a721dd8 file-logger: Prevent potential race when opening log files and change permission Tobias Brunner 2026-07-24 12:35:23 +02:00
• 50ac563292 tpm-tss-trousers: Add missing log argument if AIK private key is not found Tobias Brunner 2026-07-23 15:21:21 +02:00
• 2092fe6722 Revert "Recognize critical IssuingDistributionPoint CRL extension" Tobias Brunner 2026-07-23 14:58:18 +02:00
• 6971249758 auth-cfg: Avoid overflow when checking key strength compliance Tobias Brunner 2026-07-23 12:39:03 +02:00
• eb6fd8a8f7 signature-params: Only modify passed params if parsing succeeded Tobias Brunner 2026-07-23 10:19:01 +02:00
• 459fcabd9e chunk: Improve constant time comparison for chunks with unequal length Tobias Brunner 2026-07-21 11:52:46 +02:00
• 11241a8379 encrypted-payload: Do basic decryption check only once Tobias Brunner 2026-07-20 12:29:21 +02:00
• 52b689c4f8 pem: Avoid integer underflow when verifying padding after decryption Tobias Brunner 2026-07-20 12:05:31 +02:00
• 94e97eb183 eap-ttls: Fix memory leaks in error cases related to EAP-Identity handling Tobias Brunner 2026-07-20 09:42:39 +02:00
• f95c6a2e03 printf-hook-builtin: Avoid leaking stack contents when printing very long strings Tobias Brunner 2026-07-14 19:09:00 +02:00
• 4f3e572b5b ml: Properly implement ByteDecode with d=12 Tobias Brunner 2026-07-14 17:50:26 +02:00
• b6ff363e1c stroke: Avoid sharing a certificate printer between multiple clients Tobias Brunner 2026-07-14 16:01:13 +02:00
• f00b85dbf4 windows: Fix potential use-after-free when joining a thread Tobias Brunner 2026-07-14 13:12:33 +02:00
• 677b915efe iv-manager: Don't allow zero max_ikev1_exchanges Tobias Brunner 2026-07-14 12:27:05 +02:00
• 8bcc47b818 fips-prf: Increase log level when logging secret state Tobias Brunner 2026-07-13 19:00:28 +02:00
• 1b9b037816 sha3: Fix applying second padding bit on big-endian platforms Tobias Brunner 2026-07-13 18:57:43 +02:00
• ac7f071673 child-sa-manager: Correctly remove replaced entry in lookup tables Tobias Brunner 2026-07-13 18:25:48 +02:00
• 00830ddc36 ikev2: Make sure to correctly compare nonces of unequal length Tobias Brunner 2026-07-13 18:05:42 +02:00
• 8aca7f9231 chunk: Add utility that compares the prefix of two chunks Tobias Brunner 2026-07-13 18:00:26 +02:00
• 0ffc3f3fd6 gcrypt: Fix zeroing padding when extracting RSA value from S-expression Tobias Brunner 2026-07-13 17:25:08 +02:00
• 322d947a04 eap-sim-pcsc: Properly release context if determining list of readers fails Tobias Brunner 2026-07-13 17:14:12 +02:00
• 918e052ae1 eap-md5: Avoid memory leak caused by repeated challenges Tobias Brunner 2026-07-13 16:52:44 +02:00
• 4eaaf19217 kernel-netlink: Properly clean up pending entry if VIP installation failed Tobias Brunner 2026-07-13 16:36:39 +02:00
• c52fd0c518 ha: Fix offset checks in HA address pool Tobias Brunner 2026-07-13 16:10:39 +02:00
• e3607d546d mem-pool: Enforce size limit also for range-based pools and fix overflow Tobias Brunner 2026-07-13 15:16:15 +02:00
• a3ebaa82de xauth-pam: Use proper method to read session option Tobias Brunner 2026-07-12 20:27:44 +02:00
• ad7d50f846 nm: Fix double-free of IKE config in error cases and some leaks and potential NULL dereferences Tobias Brunner 2026-07-12 19:47:30 +02:00
• bde21aa4f9 openssl: Fix memory leak when verifying plain RSA signatures with old BoringSSL versions Tobias Brunner 2026-07-12 19:24:30 +02:00
• c64554b17f pt-tls-client: Don't store PT-TLS message on stack Tobias Brunner 2026-07-23 16:54:48 +02:00
• 3150e61e00 pt-tls-server: Don't store PT-TLS message on stack Tobias Brunner 2026-07-12 19:15:31 +02:00
• 268c11fa8c vici: Fix leak if selectors for redirect command are missing or invalid Tobias Brunner 2026-07-12 19:05:02 +02:00
• 6dca323ae0 shunt-manager: Fix potential race between install and uninstall Tobias Brunner 2026-07-12 18:22:58 +02:00
• 40f40973c0 pem: Properly handle encrypted PEM files without DEK-Info Tobias Brunner 2026-07-12 17:53:10 +02:00
• 2367cda71e android: Fix reading split-tunneling block settings in managed configs Tobias Brunner 2026-07-12 17:22:37 +02:00
• e03ec46466 vici: Fix memory leaks if loading CA cert in authority section fails Tobias Brunner 2026-07-12 17:18:47 +02:00
• 98fd5e9893 ha: Fix memory leak if Child SA key derivation fails Tobias Brunner 2026-07-12 17:03:47 +02:00
• 77cfa835cd connmark: Only install one rule per Child SA in PREROUTING Tobias Brunner 2026-07-12 16:57:27 +02:00
• 71fff07aba charon-tkm: Fix potential use-after-free in chunk map Tobias Brunner 2026-07-12 16:41:41 +02:00
• 4224c3f647 sha3: Make sure state and rate input buffers are 8-byte aligned Tobias Brunner 2026-07-12 15:25:52 +02:00
• 50177b4004 ike-auth: Enforce PPK required constraint on the initiator Tobias Brunner 2026-07-10 20:32:59 +02:00
• c40e8214ed ike-init: Make sure we received a KE payload as initiator Tobias Brunner 2026-07-10 20:24:51 +02:00
• 889d83b997 Make sure KEM implementations don't return an empty shared secret Tobias Brunner 2026-07-10 20:14:10 +02:00
• 455b3e2298 android: Fix leak of JNI local ref in IMC when creating string array Tobias Brunner 2026-07-10 19:07:22 +02:00
• dd6a984afb xauth-generic: Make sure to only use secrets that match the username Tobias Brunner 2026-07-10 08:22:17 +02:00
• 485f7645a2 kernel-wfp: Add support for SA deletion in either order Tobias Brunner 2026-07-09 19:29:26 +02:00
• 4ebd1c524a host: Do some proper validation when parsing CIDR-style subnets Tobias Brunner 2026-07-09 18:46:20 +02:00
• 6419fc8d3c eap-radius: Limit number of concurrently cached DAE responses Tobias Brunner 2026-07-09 17:01:53 +02:00
• cd24806543 simaka-message: Prevent buffer overflow when generating messages Tobias Brunner 2026-07-09 12:03:58 +02:00
• f4798de88c pkcs11: Avoid race condition in token hot-plug handling Tobias Brunner 2026-07-09 07:31:24 +02:00
• a4a123eb4f hasher: Avoid theoretical memory leaks for hashers that could potentially fail Tobias Brunner 2026-07-08 23:42:31 +02:00
• 4d843d3da8 pkcs11: Fix memory leak in the hasher_t implementation Tobias Brunner 2026-07-08 22:21:17 +02:00
• 09d48b73f4 tls-eap: Only process ACKs on the server after processing an actual packet Tobias Brunner 2026-07-08 20:29:02 +02:00
• fd7fccabe8 tls-eap: Reject EAP Start packets from clients Tobias Brunner 2026-07-08 19:28:23 +02:00
• f1c70a04d5 tnccs-dynamic: Add missing checks for underlying TNCCS instance Tobias Brunner 2026-07-08 18:36:56 +02:00
• 313d1ef88a watcher: Properly handle conflict during concurrent FD removal Tobias Brunner 2026-07-08 16:54:28 +02:00
• 3ec8d3cff1 wolfssl: Use Absorb/SqueezeBlocks API for SHAKE-128/256 XOFs Tobias Brunner 2026-07-08 16:27:29 +02:00
• e6dc515c97 Revert "nm: Pass back the username auth-dialog runs as to access ssh-agent socket" Tobias Brunner 2026-07-08 08:36:36 +02:00
• 8efb533008 capabilities: Log warning if UID changes and no capability backend is compiled in Tobias Brunner 2026-07-06 15:27:16 +02:00
• 47a583dfa2 socket-win: Bind the sockets exclusively Tobias Brunner 2026-07-06 11:46:23 +02:00
• 2ed81ed53a eap-radius: Fix access to IKE_SA when sending interim updates Tobias Brunner 2026-07-06 10:59:39 +02:00
• 588c7a80d1 array: Avoid issue when re-inserting existing element in value-based arrays Tobias Brunner 2026-07-06 10:17:13 +02:00
• 8b1f8e0e46 kernel-pfroute: Remove IP addresses from hashtable if interface disappears Tobias Brunner 2026-07-06 08:43:14 +02:00
• 62a4cde4d0 constraints: Simplify policy constraint handling and fix some TODOs Tobias Brunner 2026-07-04 19:25:10 +02:00
• 2dfc1ac1a8 pts: Fix potential crash when resolving symlinks Tobias Brunner 2026-07-03 12:18:25 +02:00
• fdf12edd85 imv-attestation: Fix log message when failing to store file measurement Tobias Brunner 2026-07-03 11:33:19 +02:00
• ca4db3c512 pts-database: Update reference file measurements as hex and not binary Tobias Brunner 2026-07-03 11:19:24 +02:00
• 4be1883303 pts-database: Reject reference file measurements with incorrect size Tobias Brunner 2026-07-03 11:03:37 +02:00
• 383b4cb0fc aesni: Make sure the CPU supports SSSE3 Tobias Brunner 2026-07-03 08:06:20 +02:00
• e37aac7b4f ldap: Replace deprecated function calls and support LDAPS Tobias Brunner 2026-07-02 16:36:52 +02:00
• e64877b46c unbound: Make sure RRs match the queried or canonical name Tobias Brunner 2026-07-02 13:01:19 +02:00
• 8ae96ed798 sec-updater: Use process_t to avoid potential command injection Tobias Brunner 2026-07-01 19:34:50 +02:00
• 80f8f5e9d4 key-exchange: Rename function that verifies pubkey lengths Tobias Brunner 2026-07-01 10:33:13 +02:00
• 1fbb14884c botan: Remove confusing documentation for DH helper function Tobias Brunner 2026-07-01 10:21:41 +02:00
• 11999f1679 mysql: Be more explicit when parsing database URI but don't log password Tobias Brunner 2026-06-29 16:33:16 +02:00