summaryrefslogtreecommitdiff
path: root/src/core
AgeCommit message (Collapse)Author
2017-09-11Restore compatibility with old OpenSSL versionsLemonBoy
Let's implement X509_STORE_up_ref on our own.
2017-09-11Increment the X509_STORE refcount during the connectionLemonBoy
OpenSSL doesn't increment the reference count when the store is assigned to a SSL_CTX.
2017-09-10Merge pull request #735 from trasz/capsicumailin-nemui
Add Capsicum support
2017-08-10Don't error out on failure to load default certificate store.Edward Tomasz Napierala
This restores the previous behaviour. Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-09Add back some ifdefs.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-05Update /CONNECT and /SERVER syntax tags (-ssl -> -tls).Paul Townsend
2017-08-01Attempt to fix build by adding the forgotten header.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-01Change the way we load default CA certificates so it works with Capsicum.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-01Clean up includes a bit.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-30Update copyrights.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-30Hook up capsicum.h and fe-capsicum.h to autotools.Edward Tomasz Napierala
This hopefully fixes Travis build. Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Fix trailing slash handling for capsicum_irclogs_path.Edward Tomasz Napierala
This is mostly an anti-footshooting measure, but still. Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Cosmetics.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Fix build without Capsicum.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Add wrappers to reduce #ifdefs.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Restrict port range available in capability mode.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Working autolog.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Working /log and /rawlog.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Fix warnings.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Prevent the user from calling "/capsicum enter" twice.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Make DNS work in capability mode.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Reorder functions.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Config file support for "capsicum" parameter.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29/connect works - although only with IP addresses.Edward Tomasz Napierala
2017-07-29Rename to "/capability enter" and "/capability status".Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Add capability mode error/success messages.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Implement /cap_enter.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Consistency: use FALSE instead of 0.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29When rawlog open fails, there's no point in trying to write. Don't.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Add missing diagnostics for rawlog open().Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Don't compute log_dir_create_mode in three different places.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-05Merge branch 'fix-11' into 'security'Nei
Correct GHashTable usage See merge request !16
2017-07-05Merge branch 'fix-10' into 'security'Nei
Check return value of localtime See merge request !15
2017-07-04correct GHashTable usageailin-nemui
2017-07-03Merge pull request #653 from ailin-nemui/regexexailin-nemui
Enable UTF8 in GRegex
2017-06-29Check return value of localtimeNei
Fixes #10
2017-06-17parse_time_interval: Allow negative time in settingsdequis
This splits sign parsing out of parse_time_interval_uint() so that the negative sign is applied outside of the unsigned context where the number parsing is done, and after all the checks that it's lower than (1 << 31) This fixes issues with settings like `server_reconnect_time`, `server_connect_timeout` and `lag_max_before_disconnect`, which accepted -1 as a valid value.
2017-06-05get rid of new_textailin-nemui
2017-06-05Update iregex-gregex.cailin-nemui
add 2 comments about new_string
2017-06-05Update iregex-gregex.cailin-nemui
make helper functions static
2017-06-04Refactor regex and implement UTF8 mode for GRegexailin-nemui
- with non-unicode byte to Private Use Area A mapping - move all ifdefs to iregex.h file only
2017-05-18Add parse_uint function to improve integer overflow handlingdequis
Originally found by oss-fuzz (issue 525) in get_ansi_color using ubsan. After a lot of analysis I'm 99% sure this isn't security relevant so it's fine to handle this publicly. The fix is mainly adding a function that does it right and use it everywhere. This is harder than it seems because the strtol() family of functions doesn't have the friendliest of interfaces. Aside from get_ansi_color(), there were other pieces of code that used the same (out*10+(*in-'0')) pattern, like the parse_size() and parse_time_interval() functions, which are mostly used for settings. Those are interesting cases, since they multiply the parsed number (resulting in more overflows) and they write to a signed integer parameter (which can accidentally make the uints negative without UB) Thanks to Pascal Cuoq for enlightening me about the undefined behavior of parse_size (and, in particular, the implementation-defined behavior of one of the WIP versions of this commit, where something like signed integer overflow happened, but it was legal). Also for writing tis-interpreter, which is better than ubsan to verify these things.
2017-05-12expand macroailin-nemui
2017-05-12improve nicklist performanceailin-nemui
2017-03-31Fix off by one error with char_expandosJoseph Bisch
2017-03-08expand_escape: expand double backslash as a backslashdequis
2017-03-07Merge pull request #659 from ailin-nemui/foreach_dontspamailin-nemui
make foreach send commands
2017-03-06Revert "Quote the filename when dcc requests are auto accepted."ailin-nemui
2017-03-04Merge pull request #658 from LemonBoy/dcc-autoacceptailin-nemui
Quote the filename when dcc requests are auto accepted.
2017-03-04Properly check the command arguments in tail place.LemonBoy
A command requiring an argument and given in tail position would not raise an error but silently set the value to the empty string ''.
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-28 22:18:55 +0000