a5fa265811
Merge pull request #275 from chipitsine/master
...
cppcheck findings
2018-02-01 00:06:08 +01:00
9d6c1ea0e9
Add missing function definition
2018-01-25 02:58:18 +01:00
93d9ade990
Merge PR #129 into master.
2018-01-25 02:55:11 +01:00
7de986dcca
7 missing memory boundaries checks and similar memory problems. There are no risk of arbitrary code execution or intrusion on these bugs in my analysis. However, these problems may lead to crash the running server process. So these bugs must be fixed.
...
Buffer overread in ParseL2TPPacket()
Memory corruption in IcmpParseResult
Missing bounds check in ParseUDP() can lead to invalid memory access
Out-of-bounds read in IPsec_PPP.c (unterminated string buffer)
Overlapping parameters to memcpy() via StrToIp6()
PACK ReadValue() crash vulnerability
Potential use of uninitialized memory via IPToInAddr6()
4 memory leaks. While the amount of leakage is very small per time, these bugs can finally cause process crash by out of memory. So these bugs must be fixed.
Memory leak in NnReadDnsRecord
Memory leak in RadiusLogin()
Memory leak via ParsePacketIPv4WithDummyMacHeader
Remote memory leak in OpenVPN server code
1 coding improvement. This is not a bug, however, I fixed the code to avoid furture misunderstanding.
RecvAll can return success on failure (leading to use of uninitialized memory)
Contributors for this bugfix:
- Max Planck Institute for Molecular Genetics
- Guido Vranken
2018-01-15 10:25:10 +09:00
ab4b27ab3c
Add parameter "ListenIP" to server configuration (vpn_server.config) ( #202 )
...
* Added parameter "ListenIP" to server configuration (vpn_server.config)
* Fixed bug in VPN client
2018-01-11 23:53:38 +01:00
ce3d35c595
Added the function to save the DNS query log on the packet logs. (fix)
2017-12-22 07:26:06 +09:00
a0b54d7c6d
Added the TCP destination port 3128 (well known as Squid default port) to assume as the HTTP proxy port on the packet logging.
2017-12-21 23:25:08 +09:00
bb30535bb6
Fix the function name: RFC3164 -> RFC3339
2017-12-21 23:24:06 +09:00
97e7a82be2
Added the function to save the DNS query log on the packet logs.
2017-12-21 23:23:17 +09:00
1f2c052dfb
Fixed the bug on the OpenVPN Server function.
2017-10-23 02:54:51 +09:00
9f9dc459a7
Preparing the development branch
2017-10-19 15:00:41 +09:00
faee11ff09
v4.23-9647-beta
2017-10-18 18:24:21 +09:00
acf49ad536
Merge pull request #344 from quantum5/openssl1.1
...
OpenSSL 1.1 Port
2017-10-18 16:58:46 +09:00
1b73778e3f
Merge pull request #315 from rel22/SoftetherVPN-RuToken-S-patch-1
...
Added support for RuToken USB key PKCS#11
2017-10-18 16:58:19 +09:00
f9436daa6f
Merge pull request #313 from zulzardi/patch-2
...
Fixed RSA key bits wrong calculation for certain x509 certificate
2017-10-18 16:58:09 +09:00
0746be43a2
OpenSSL 1.1 Port.
...
Some potential problems with Ssl_Init_Async_SendAlert.
2017-07-29 22:31:25 -04:00
61e71be380
Add support for RuToken USB key PKCS#11
...
Test on RuToken-S key.
https://www.rutoken.ru/products/all/rutoken-s/
2017-03-13 18:17:24 +03:00
a3db7b2e3d
Update Encrypt.c
...
Fixed RSA bits wrong calculation for certain x509 certificate
2017-03-10 12:04:17 +08:00
071004477f
Fix errors while adding SHA2 support to HMAC
2017-01-23 02:03:37 +01:00
29234b7f9a
Add HMAC SHA2 to IKE
2017-01-23 00:50:48 +01:00
342d602f5d
Add support for HMAC SHA2-256, HMAC SHA2-384, HMAC SHA2-512
2017-01-22 16:09:30 +01:00
095d5e7b70
fix "Access to field 'p' results in a dereference of a null pointer (loaded from field 'Folders')" found by clang static analyzer
2016-11-28 19:33:15 +05:00
39cf3a77cc
fix "Function call argument is an uninitialized value" found by clang static analyzer
2016-11-28 19:28:41 +05:00
a658963cdc
make code more readable (inspired by clang static analyzer)
2016-11-28 17:56:00 +05:00
334765ffd7
resolved several cppcheck findings:
...
[src/Cedar/Admin.c:418]: (error) Possible null pointer dereference: cedar
[src/Cedar/Admin.c:616]: (error) Possible null pointer dereference: cedar
[src/Cedar/WebUI.c:369]: (error) Uninitialized variable: retcode
[src/Mayaqua/Encrypt.c:4485]: (error) Uninitialized variable: key
[src/Mayaqua/Network.c:13548]: (error) Uninitialized variable: e
2016-11-28 17:27:29 +05:00
4df2eb4f9c
v4.22-9634-beta
2016-11-27 17:43:14 +09:00
5f8ce287c3
Merge pull request #133 from yehorov/master
...
Add the possibility to send the Virtual Hub Name to an external DHCP server
2016-11-27 17:55:04 +09:00
697bff4023
Merge pull request #165 from micsell/cpupatch
...
Fixed OSX CPU utilization by replacing broken kevent() with select()
2016-11-27 17:54:57 +09:00
034a213c2c
Merge pull request #204 from LegDog/master
...
Adding Radius AVP Called-Station-Id
2016-11-27 17:53:45 +09:00
712adc6d74
resolved the conflict
2016-11-27 17:48:18 +09:00
ced0856ab1
HTTPS /wiki redir to 443 (test)
2016-11-08 14:44:35 -02:00
03ffd7535a
merge upstream v4.21-9613-beta
2016-05-04 12:27:52 +03:00
84f95447a3
cppcheck issues:
...
[src/Cedar/WebUI.c:1728] -> [src/Cedar/WebUI.c:1730]: (warning) Either the condition 'buf==0' is redundant or there is possible null pointer dereference: buf.
[src/Mayaqua/FileIO.c:383] -> [src/Mayaqua/FileIO.c:386]: (warning) Either the condition 'p==0' is redundant or there is possible null pointer dereference: p.
[src/Mayaqua/TcpIp.c:1837] -> [src/Mayaqua/TcpIp.c:1839]: (warning) Either the condition 'tcp!=0' is redundant or there is possible null pointer dereference: tcp.
2016-04-29 23:59:35 +05:00
1e17c9bcfd
v4.21-9613-beta
2016-04-24 23:49:31 +09:00
4a3f08e5b8
merge upstream v4.19-9605-beta
2016-03-08 21:32:14 +02:00
17e624ac26
v4.19-9605-beta
2016-03-06 23:16:01 +09:00
04b72873c7
Fix the problem of the DisableSslVersions patch.
2015-11-23 16:15:10 +08:00
8b1b67faed
Introduce DisableSslVersions.
...
The SSL Versions specified will be disabled on server context.
2015-11-10 00:55:24 +08:00
3228b114a4
merge upstream v4.19-9599-beta
2015-10-19 22:42:18 +03:00
d3a1b26413
v4.19-9599-beta
2015-10-19 21:30:51 +09:00
7aaf3d8fd3
merge upstream v4.19-9582-beta
2015-10-13 23:13:25 +03:00
4e862a7e40
v4.19-9582-beta
2015-10-06 20:18:00 +09:00
1cf9df5539
merge upstream v4.18-9570-rtm
2015-07-26 23:10:21 +03:00
4b65e251f2
v4.18-9570-rtm
2015-07-26 19:39:40 +09:00
7e00268084
merge with vendor v4.17-9566-beta
2015-07-21 01:15:44 +03:00
860f743dd7
v4.17-9566-beta
2015-07-17 00:31:57 +09:00
1a9fe52991
merge with vendor
2015-07-15 19:28:20 +03:00
29d330522d
Fixed OSX CPU utilization by replacing broken kevent() with select()
2015-07-09 01:11:40 +03:00
ff49706373
v4.17-9562-beta
2015-05-31 19:02:35 +09:00
983c19c043
v4.15-9539-beta
2015-04-04 05:58:09 +09:00
