1
0
mirror of https://github.com/SoftEtherVPN/SoftEtherVPN.git synced 2025-07-07 00:04:57 +03:00
Commit Graph

1977 Commits

Author SHA1 Message Date
ea4bb811ef Fix log msg for IKE with agressive exchange mode (#425) 2018-01-23 17:42:20 +01:00
5eb83bbad4 Merge pull request #419 from dnobori/180105-bugfix
Fixes 11 vulnerabilities
2018-01-19 17:54:23 +01:00
7de986dcca 7 missing memory boundaries checks and similar memory problems. There are no risk of arbitrary code execution or intrusion on these bugs in my analysis. However, these problems may lead to crash the running server process. So these bugs must be fixed.
Buffer overread in ParseL2TPPacket()
Memory corruption in IcmpParseResult
Missing bounds check in ParseUDP() can lead to invalid memory access
Out-of-bounds read in IPsec_PPP.c (unterminated string buffer)
Overlapping parameters to memcpy() via StrToIp6()
PACK ReadValue() crash vulnerability
Potential use of uninitialized memory via IPToInAddr6()

4 memory leaks. While the amount of leakage is very small per time, these bugs can finally cause process crash by out of memory. So these bugs must be fixed.

Memory leak in NnReadDnsRecord
Memory leak in RadiusLogin()
Memory leak via ParsePacketIPv4WithDummyMacHeader
Remote memory leak in OpenVPN server code

1 coding improvement. This is not a bug, however, I fixed the code to avoid furture misunderstanding.

RecvAll can return success on failure (leading to use of uninitialized memory)

Contributors for this bugfix:

- Max Planck Institute for Molecular Genetics
- Guido Vranken
2018-01-15 10:25:10 +09:00
8edbcd4c0d update recent authors 2018-01-15 10:11:40 +09:00
b810352f67 Updated AUTHORS.TXT file 2018-01-11 23:57:55 +01:00
ab4b27ab3c Add parameter "ListenIP" to server configuration (vpn_server.config) (#202)
* Added parameter "ListenIP" to server configuration (vpn_server.config)

* Fixed bug in VPN client
2018-01-11 23:53:38 +01:00
e391b4d503 Merge pull request #405 from dnobori/dev
Fixed the bug which occurs the L2TP/IPsec connection error with Android Oreo, etc.
2018-01-04 17:59:03 +09:00
ce3d35c595 Added the function to save the DNS query log on the packet logs. (fix) 2017-12-22 07:26:06 +09:00
a0b54d7c6d Added the TCP destination port 3128 (well known as Squid default port) to assume as the HTTP proxy port on the packet logging. 2017-12-21 23:25:08 +09:00
bb30535bb6 Fix the function name: RFC3164 -> RFC3339 2017-12-21 23:24:06 +09:00
97e7a82be2 Added the function to save the DNS query log on the packet logs. 2017-12-21 23:23:17 +09:00
4a01c41d09 Fixed the bug which occurs the L2TP/IPsec connection error with Android Oreo. 2017-12-21 23:21:31 +09:00
bed99f9a56 build documentation refactoring (#395)
BUILD_WINDOWS.TXT, BUILD_UNIX.TXT removed from root folder

src/BUILD_WINDOWS.TXT, src/BUILD_UNIX.TXT converted to "md"

BUILD_WINDOWS.TXT, BUILD_UNIX.TXT are now hyperlinks in README.md
2017-12-05 13:17:14 +01:00
671407dcfa Add travis-ci Badge to README.md 2017-12-04 23:40:39 +01:00
87c659e089 Update AUTHORS.TXT 2017-12-04 16:59:30 +01:00
d94d5ed2e7 Reformat README. Add compile requirements (#379)
* Reformat README. Add compile requirements

* Expand the list of required packages for a successful compilation

* Renamed README to README.md  (Default name in github)
2017-12-03 20:51:07 +01:00
1f33fbdff4 Fix: vpncmd thinks that "hamcore.se2" is missing or broken (#339) 2017-12-03 20:50:12 +01:00
0796249525 fix aarch64 build (#281)
Fix build error under ARM 64 bit (aarch64)
2017-12-03 20:48:39 +01:00
d1c543eecd initial travis-ci support (#348) 2017-12-03 20:47:31 +01:00
b8f0dd9e80 align the code and update some translations
*align the code to have same amout of space
*update some translation to latest version
2017-12-02 06:04:57 +08:00
39c1081d38 Merge pull request #1 from SoftEtherVPN/master
update to latest version
2017-12-02 01:30:07 +08:00
feb268c404 Initial Commit of gitignore (#380)
* Initial Commit of gitignore

* Remove extra line in .gitignore
2017-11-22 16:05:30 +01:00
4f23c7d08a Added the board members list on README 2017-11-06 00:57:29 +09:00
1f2c052dfb Fixed the bug on the OpenVPN Server function. 2017-10-23 02:54:51 +09:00
fd7707d95a Fixed the service title. 2017-10-19 15:28:28 +09:00
d8bf734baa Fixed the service title. 2017-10-19 15:24:51 +09:00
804b9f1a19 Preparing the development branch 2017-10-19 15:18:42 +09:00
d7d0e6d36f Merge branch 'master' of github.com:SoftEtherVPN/SoftEtherVPN 2017-10-19 15:01:10 +09:00
9f9dc459a7 Preparing the development branch 2017-10-19 15:00:41 +09:00
d8ab9c00ec Preparing the development branch 2017-10-19 14:54:56 +09:00
faee11ff09 v4.23-9647-beta 2017-10-18 18:24:21 +09:00
acf49ad536 Merge pull request #344 from quantum5/openssl1.1
OpenSSL 1.1 Port
2017-10-18 16:58:46 +09:00
1b73778e3f Merge pull request #315 from rel22/SoftetherVPN-RuToken-S-patch-1
Added support for RuToken USB key PKCS#11
2017-10-18 16:58:19 +09:00
f9436daa6f Merge pull request #313 from zulzardi/patch-2
Fixed RSA key bits wrong calculation for certain x509 certificate
2017-10-18 16:58:09 +09:00
2241b9a366 Merge pull request #309 from moatazelmasry2/openvpn-extend-ciphers
Openvpn extend ciphers
2017-10-18 16:57:52 +09:00
c32310205d Merge pull request #294 from moatazelmasry2/add-sha2
Add HMAC SHA2-256, HMAC SHA2-384, HMAC SHA2-512 support
2017-10-18 16:57:36 +09:00
056c322601 Merge branch 'master' into add-sha2 2017-10-18 16:57:26 +09:00
936815f2d4 Merge pull request #293 from moatazelmasry2/expand-dh-groups
Add DH groups 2048,3072,4096 to IPSec_IKE
2017-10-18 16:37:22 +09:00
8ae035420b Merge pull request #282 from NoahO/NoahO-PPP-patch
Stop Radius Delay from counting to next_resend
2017-10-18 16:37:02 +09:00
270cd9c17e Merge pull request #276 from DDGo/master
Remove blank line at the start from init file (Debian)
2017-10-18 16:36:44 +09:00
b61882598f Merge pull request #256 from cm0x4D/master
Using client parameter in function CtConnect
2017-10-18 16:36:24 +09:00
178a00f2d3 Using client parameter in function CtConnect
Using the global client variable might lead to strange behavoir if multiple clients are allocated and to crashes in the case the client was not initialized with CtStartClient()
2017-09-28 10:51:29 +02:00
78bcc07fa9 Peer info optional in OvsParseKeyMethod2() 2017-09-28 10:37:24 +02:00
0746be43a2 OpenSSL 1.1 Port.
Some potential problems with Ssl_Init_Async_SendAlert.
2017-07-29 22:31:25 -04:00
e9006faf0c Merge pull request #287 from chipitsine/github-templates
added github PR template
2017-07-16 11:53:31 +09:00
61e71be380 Add support for RuToken USB key PKCS#11
Test on RuToken-S key.
https://www.rutoken.ru/products/all/rutoken-s/
2017-03-13 18:17:24 +03:00
a3db7b2e3d Update Encrypt.c
Fixed RSA bits wrong calculation for certain x509 certificate
2017-03-10 12:04:17 +08:00
fdcf90d3f0 Add CAMELLIA cipher suite to OpenVPN 2017-02-24 14:09:22 +01:00
86383d1f60 Merge branch 'add-sha2' into openvpn-extend-ciphers 2017-02-24 13:59:00 +01:00
e0a9fb1950 Add HMAC-SHA2-256, HMAC2-384, HMAC2-512 support to OpenVPN 2017-01-23 02:34:25 +01:00