-
65989b3a5a
android: shared ui components (SectionCard, ListRow, StatusPill, SnackbarHost)

DenozordecandClaude Opus 5.5
2026-10-09 23:39:35 +07:00
-
5f6726f173
android: drop reui palette, align splash/window/system bars with Compose surface

DenozordecandClaude Opus 5.5
2026-10-09 23:39:35 +07:00
-
fda3ec158c
android: expressive theme, tonal palette, ShxSpacing/ShxShapes tokens

DenozordecandClaude Opus 5.5
2026-10-09 23:35:59 +07:00
-
c872246b8c
android: compose BOM 2026.06.01 + material3 1.5.0-alpha18 (expressive API)

DenozordecandClaude Opus 5.5
2026-10-09 23:35:59 +07:00
-
e9a239e419
android: 2.14.6 - reroute long-dead direct hosts through the tunnel

DenozordecandClaude Opus 5.5
2026-10-09 23:28:03 +07:00
-
bc256ad369
android: 2.14.2 - fix network label showing cellular while on Wi-Fi
Denozordec
2026-10-05 01:56:46 +07:00
-
7185aa4ba5
android: 2.14.1 - traffic split, exit IP, dead-host visibility (UX phase 1)
Denozordec
2026-10-05 00:56:47 +07:00
-
de5b093d62
android: keep jniLibs compressed after the minSdk 23 bump
Denozordec
2026-10-05 00:41:51 +07:00
-
2c69cbe775
android: 2.14.0 - minSdk 23 + adaptive navigation (Stage 3)
Denozordec
2026-10-05 00:39:09 +07:00
-
285d14e996
android: 2.13.15 - exponential direct-dst cooldown, double-start guard, flap-aware auto-connect
Denozordec
2026-10-04 23:04:01 +07:00
-
3c73eb5a27
android: 2.13.14 - fix owner attribution protocol, log update events, ESP replay window context
Denozordec
2026-10-04 01:15:25 +07:00
-
95d88709f9
android: 2.13.11-2.13.13 release snapshot (battery backoff, direct-flow cooldown, owner attribution, rule-set editor)
Denozordec
2026-10-04 01:07:04 +07:00
-
56f5a00417
android: Ignore Kotlin build scratch dir
Denozordec
2026-09-30 17:38:16 +07:00
-
e9bdf60f82
android: Pin direct-flow sockets to the active network (2.13.10)
Denozordec
2026-09-30 17:37:45 +07:00
-
d12fb96dc2
android: Full Compose rewrite + two-mode RU split with userspace routing
Denozordec
2026-09-30 16:50:03 +07:00
-
9dcc56c821
Update Android project configuration and permissions
Denozordec
2026-09-01 15:38:09 +07:00
-
2265fcd1b4
stroke: Avoid underflow when reporting number of SAs
Tobias Brunner
2026-08-24 16:21:49 +02:00
-
3b58c67202
charon-tkm: Pass ia and ea ids according to configured proposal mappings
Tobias Brunner
2022-05-10 10:56:15 +02:00
-
14fa2d45d8
proposal: Add constructor that does no checks or fixups
Tobias Brunner
2022-05-10 14:37:40 +02:00
-
ac1dde042a
proposal: Add lower case names for protocols
Tobias Brunner
2022-05-10 14:26:38 +02:00
-
5011838b32
windows: Avoid potential races with canceling threads
Tobias Brunner
2026-07-28 11:51:16 +02:00
-
3934089415
atomics: Add helpers to atomically load/store bools
Tobias Brunner
2026-07-28 11:22:23 +02:00
-
bf438cb182
vici: Make IKEv2 the default IKE version
Tobias Brunner
2026-07-24 16:34:41 +02:00
-
e0fd0f51ea
configure: Disable IKEv1 support by default
Tobias Brunner
2026-07-24 16:24:42 +02:00
-
2f9b52bd1b
tnccs-dynamic: Remove unused plugin
Tobias Brunner
2026-07-24 15:43:20 +02:00
-
ec2a501d8e
tnccs-11: Remove legacy TNCCS-1.1 implementation
Tobias Brunner
2026-07-24 15:39:06 +02:00
-
1fa33a0631
tnc-ifmap: Remove prototypical IF-MAP plugin
Tobias Brunner
2026-07-24 15:33:35 +02:00
-
3a23a56b29
soup: Remove limited fetcher plugin
Tobias Brunner
2026-07-24 15:27:12 +02:00
-
7d122d5a98
gcrypt: Remove limited crypto plugin
Tobias Brunner
2026-07-24 15:15:30 +02:00
-
248c915593
af-alg: Remove plugin for deprecated AF_ALG interface
Tobias Brunner
2026-07-24 15:12:03 +02:00
-
10beab8bcd
padlock: Remove legacy hardware crypto plugin
Tobias Brunner
2026-07-24 15:06:10 +02:00
-
9f6273786e
led: Remove unused plugin
Tobias Brunner
2026-07-24 15:03:58 +02:00
-
8b2e60b62b
duplicheck: Remove confusing plugin
Tobias Brunner
2026-07-24 14:56:13 +02:00
-
67327e9074
blowfish: Remove legacy Blowfish implementation
Tobias Brunner
2026-07-24 14:52:13 +02:00
-
e535ba99ac
android-dns: Remove legacy Android DNS plugin
Tobias Brunner
2026-07-24 14:48:23 +02:00
-
eb50fd9d15
keychain: Remove unused macOS KeyChain plugin
Tobias Brunner
2026-07-24 14:41:43 +02:00
-
ceae73cb04
charon-xpc: Remove prototypical macOS application
Tobias Brunner
2026-07-24 14:39:18 +02:00
-
60846f24bf
libfast: Remove FastCGI application server library
Tobias Brunner
2026-07-24 14:31:10 +02:00
-
ac690f1a5e
medsrv/medcli: Remove prototypical medsrv web application and plugins
Tobias Brunner
2026-07-24 14:21:44 +02:00
-
96b0011d30
smp: Remove legacy configuration/control interface
Tobias Brunner
2026-07-24 14:15:24 +02:00
-
f55bb2b384
manager: Remove legacy PoC manager web application
Tobias Brunner
2026-07-24 14:12:16 +02:00
-
ea7a721dd8
file-logger: Prevent potential race when opening log files and change permission
Tobias Brunner
2026-07-24 12:35:23 +02:00
-
50ac563292
tpm-tss-trousers: Add missing log argument if AIK private key is not found
Tobias Brunner
2026-07-23 15:21:21 +02:00
-
2092fe6722
Revert "Recognize critical IssuingDistributionPoint CRL extension"
Tobias Brunner
2026-07-23 14:58:18 +02:00
-
6971249758
auth-cfg: Avoid overflow when checking key strength compliance
Tobias Brunner
2026-07-23 12:39:03 +02:00
-
eb6fd8a8f7
signature-params: Only modify passed params if parsing succeeded
Tobias Brunner
2026-07-23 10:19:01 +02:00
-
459fcabd9e
chunk: Improve constant time comparison for chunks with unequal length
Tobias Brunner
2026-07-21 11:52:46 +02:00
-
11241a8379
encrypted-payload: Do basic decryption check only once
Tobias Brunner
2026-07-20 12:29:21 +02:00
-
52b689c4f8
pem: Avoid integer underflow when verifying padding after decryption
Tobias Brunner
2026-07-20 12:05:31 +02:00
-
94e97eb183
eap-ttls: Fix memory leaks in error cases related to EAP-Identity handling
Tobias Brunner
2026-07-20 09:42:39 +02:00
-
f95c6a2e03
printf-hook-builtin: Avoid leaking stack contents when printing very long strings
Tobias Brunner
2026-07-14 19:09:00 +02:00
-
4f3e572b5b
ml: Properly implement ByteDecode with d=12
Tobias Brunner
2026-07-14 17:50:26 +02:00
-
b6ff363e1c
stroke: Avoid sharing a certificate printer between multiple clients
Tobias Brunner
2026-07-14 16:01:13 +02:00
-
f00b85dbf4
windows: Fix potential use-after-free when joining a thread
Tobias Brunner
2026-07-14 13:12:33 +02:00
-
677b915efe
iv-manager: Don't allow zero max_ikev1_exchanges
Tobias Brunner
2026-07-14 12:27:05 +02:00
-
8bcc47b818
fips-prf: Increase log level when logging secret state
Tobias Brunner
2026-07-13 19:00:28 +02:00
-
1b9b037816
sha3: Fix applying second padding bit on big-endian platforms
Tobias Brunner
2026-07-13 18:57:43 +02:00
-
ac7f071673
child-sa-manager: Correctly remove replaced entry in lookup tables
Tobias Brunner
2026-07-13 18:25:48 +02:00
-
00830ddc36
ikev2: Make sure to correctly compare nonces of unequal length
Tobias Brunner
2026-07-13 18:05:42 +02:00
-
8aca7f9231
chunk: Add utility that compares the prefix of two chunks
Tobias Brunner
2026-07-13 18:00:26 +02:00
-
0ffc3f3fd6
gcrypt: Fix zeroing padding when extracting RSA value from S-expression
Tobias Brunner
2026-07-13 17:25:08 +02:00
-
322d947a04
eap-sim-pcsc: Properly release context if determining list of readers fails
Tobias Brunner
2026-07-13 17:14:12 +02:00
-
918e052ae1
eap-md5: Avoid memory leak caused by repeated challenges
Tobias Brunner
2026-07-13 16:52:44 +02:00
-
4eaaf19217
kernel-netlink: Properly clean up pending entry if VIP installation failed
Tobias Brunner
2026-07-13 16:36:39 +02:00
-
c52fd0c518
ha: Fix offset checks in HA address pool
Tobias Brunner
2026-07-13 16:10:39 +02:00
-
e3607d546d
mem-pool: Enforce size limit also for range-based pools and fix overflow
Tobias Brunner
2026-07-13 15:16:15 +02:00
-
a3ebaa82de
xauth-pam: Use proper method to read session option
Tobias Brunner
2026-07-12 20:27:44 +02:00
-
ad7d50f846
nm: Fix double-free of IKE config in error cases and some leaks and potential NULL dereferences
Tobias Brunner
2026-07-12 19:47:30 +02:00
-
bde21aa4f9
openssl: Fix memory leak when verifying plain RSA signatures with old BoringSSL versions
Tobias Brunner
2026-07-12 19:24:30 +02:00
-
c64554b17f
pt-tls-client: Don't store PT-TLS message on stack
Tobias Brunner
2026-07-23 16:54:48 +02:00
-
3150e61e00
pt-tls-server: Don't store PT-TLS message on stack
Tobias Brunner
2026-07-12 19:15:31 +02:00
-
268c11fa8c
vici: Fix leak if selectors for redirect command are missing or invalid
Tobias Brunner
2026-07-12 19:05:02 +02:00
-
6dca323ae0
shunt-manager: Fix potential race between install and uninstall
Tobias Brunner
2026-07-12 18:22:58 +02:00
-
40f40973c0
pem: Properly handle encrypted PEM files without DEK-Info
Tobias Brunner
2026-07-12 17:53:10 +02:00
-
2367cda71e
android: Fix reading split-tunneling block settings in managed configs
Tobias Brunner
2026-07-12 17:22:37 +02:00
-
e03ec46466
vici: Fix memory leaks if loading CA cert in authority section fails
Tobias Brunner
2026-07-12 17:18:47 +02:00
-
98fd5e9893
ha: Fix memory leak if Child SA key derivation fails
Tobias Brunner
2026-07-12 17:03:47 +02:00
-
77cfa835cd
connmark: Only install one rule per Child SA in PREROUTING
Tobias Brunner
2026-07-12 16:57:27 +02:00
-
71fff07aba
charon-tkm: Fix potential use-after-free in chunk map
Tobias Brunner
2026-07-12 16:41:41 +02:00
-
4224c3f647
sha3: Make sure state and rate input buffers are 8-byte aligned
Tobias Brunner
2026-07-12 15:25:52 +02:00
-
50177b4004
ike-auth: Enforce PPK required constraint on the initiator
Tobias Brunner
2026-07-10 20:32:59 +02:00
-
c40e8214ed
ike-init: Make sure we received a KE payload as initiator
Tobias Brunner
2026-07-10 20:24:51 +02:00
-
889d83b997
Make sure KEM implementations don't return an empty shared secret
Tobias Brunner
2026-07-10 20:14:10 +02:00
-
455b3e2298
android: Fix leak of JNI local ref in IMC when creating string array
Tobias Brunner
2026-07-10 19:07:22 +02:00
-
dd6a984afb
xauth-generic: Make sure to only use secrets that match the username
Tobias Brunner
2026-07-10 08:22:17 +02:00
-
485f7645a2
kernel-wfp: Add support for SA deletion in either order
Tobias Brunner
2026-07-09 19:29:26 +02:00
-
4ebd1c524a
host: Do some proper validation when parsing CIDR-style subnets
Tobias Brunner
2026-07-09 18:46:20 +02:00
-
6419fc8d3c
eap-radius: Limit number of concurrently cached DAE responses
Tobias Brunner
2026-07-09 17:01:53 +02:00
-
cd24806543
simaka-message: Prevent buffer overflow when generating messages
Tobias Brunner
2026-07-09 12:03:58 +02:00
-
f4798de88c
pkcs11: Avoid race condition in token hot-plug handling
Tobias Brunner
2026-07-09 07:31:24 +02:00
-
a4a123eb4f
hasher: Avoid theoretical memory leaks for hashers that could potentially fail
Tobias Brunner
2026-07-08 23:42:31 +02:00
-
4d843d3da8
pkcs11: Fix memory leak in the hasher_t implementation
Tobias Brunner
2026-07-08 22:21:17 +02:00
-
09d48b73f4
tls-eap: Only process ACKs on the server after processing an actual packet
Tobias Brunner
2026-07-08 20:29:02 +02:00
-
fd7fccabe8
tls-eap: Reject EAP Start packets from clients
Tobias Brunner
2026-07-08 19:28:23 +02:00
-
f1c70a04d5
tnccs-dynamic: Add missing checks for underlying TNCCS instance
Tobias Brunner
2026-07-08 18:36:56 +02:00
-
313d1ef88a
watcher: Properly handle conflict during concurrent FD removal
Tobias Brunner
2026-07-08 16:54:28 +02:00
-
3ec8d3cff1
wolfssl: Use Absorb/SqueezeBlocks API for SHAKE-128/256 XOFs
Tobias Brunner
2026-07-08 16:27:29 +02:00
-
e6dc515c97
Revert "nm: Pass back the username auth-dialog runs as to access ssh-agent socket"
Tobias Brunner
2026-07-08 08:36:36 +02:00
-
8efb533008
capabilities: Log warning if UID changes and no capability backend is compiled in
Tobias Brunner
2026-07-06 15:27:16 +02:00
-
47a583dfa2
socket-win: Bind the sockets exclusively
Tobias Brunner
2026-07-06 11:46:23 +02:00