summaryrefslogtreecommitdiff
path: root/src/core
AgeCommit message (Collapse)Author
2017-08-10Don't error out on failure to load default certificate store.Edward Tomasz Napierala
This restores the previous behaviour. Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-09Add back some ifdefs.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-05Update /CONNECT and /SERVER syntax tags (-ssl -> -tls).Paul Townsend
2017-08-01Attempt to fix build by adding the forgotten header.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-01Change the way we load default CA certificates so it works with Capsicum.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-08-01Clean up includes a bit.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-30Update copyrights.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-30Hook up capsicum.h and fe-capsicum.h to autotools.Edward Tomasz Napierala
This hopefully fixes Travis build. Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Fix trailing slash handling for capsicum_irclogs_path.Edward Tomasz Napierala
This is mostly an anti-footshooting measure, but still. Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Cosmetics.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Fix build without Capsicum.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Add wrappers to reduce #ifdefs.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Restrict port range available in capability mode.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Working autolog.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Working /log and /rawlog.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Fix warnings.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Prevent the user from calling "/capsicum enter" twice.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Make DNS work in capability mode.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Reorder functions.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Config file support for "capsicum" parameter.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29/connect works - although only with IP addresses.Edward Tomasz Napierala
2017-07-29Rename to "/capability enter" and "/capability status".Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Add capability mode error/success messages.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Implement /cap_enter.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Consistency: use FALSE instead of 0.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29When rawlog open fails, there's no point in trying to write. Don't.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Add missing diagnostics for rawlog open().Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Don't compute log_dir_create_mode in three different places.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-05Merge branch 'fix-11' into 'security'Nei
Correct GHashTable usage See merge request !16
2017-07-05Merge branch 'fix-10' into 'security'Nei
Check return value of localtime See merge request !15
2017-07-04correct GHashTable usageailin-nemui
2017-07-03Merge pull request #653 from ailin-nemui/regexexailin-nemui
Enable UTF8 in GRegex
2017-06-29Check return value of localtimeNei
Fixes #10
2017-06-17parse_time_interval: Allow negative time in settingsdequis
This splits sign parsing out of parse_time_interval_uint() so that the negative sign is applied outside of the unsigned context where the number parsing is done, and after all the checks that it's lower than (1 << 31) This fixes issues with settings like `server_reconnect_time`, `server_connect_timeout` and `lag_max_before_disconnect`, which accepted -1 as a valid value.
2017-06-05get rid of new_textailin-nemui
2017-06-05Update iregex-gregex.cailin-nemui
add 2 comments about new_string
2017-06-05Update iregex-gregex.cailin-nemui
make helper functions static
2017-06-04Refactor regex and implement UTF8 mode for GRegexailin-nemui
- with non-unicode byte to Private Use Area A mapping - move all ifdefs to iregex.h file only
2017-05-18Add parse_uint function to improve integer overflow handlingdequis
Originally found by oss-fuzz (issue 525) in get_ansi_color using ubsan. After a lot of analysis I'm 99% sure this isn't security relevant so it's fine to handle this publicly. The fix is mainly adding a function that does it right and use it everywhere. This is harder than it seems because the strtol() family of functions doesn't have the friendliest of interfaces. Aside from get_ansi_color(), there were other pieces of code that used the same (out*10+(*in-'0')) pattern, like the parse_size() and parse_time_interval() functions, which are mostly used for settings. Those are interesting cases, since they multiply the parsed number (resulting in more overflows) and they write to a signed integer parameter (which can accidentally make the uints negative without UB) Thanks to Pascal Cuoq for enlightening me about the undefined behavior of parse_size (and, in particular, the implementation-defined behavior of one of the WIP versions of this commit, where something like signed integer overflow happened, but it was legal). Also for writing tis-interpreter, which is better than ubsan to verify these things.
2017-05-12expand macroailin-nemui
2017-05-12improve nicklist performanceailin-nemui
2017-03-31Fix off by one error with char_expandosJoseph Bisch
2017-03-08expand_escape: expand double backslash as a backslashdequis
2017-03-07Merge pull request #659 from ailin-nemui/foreach_dontspamailin-nemui
make foreach send commands
2017-03-06Revert "Quote the filename when dcc requests are auto accepted."ailin-nemui
2017-03-04Merge pull request #658 from LemonBoy/dcc-autoacceptailin-nemui
Quote the filename when dcc requests are auto accepted.
2017-03-04Properly check the command arguments in tail place.LemonBoy
A command requiring an argument and given in tail position would not raise an error but silently set the value to the empty string ''.
2017-02-27make foreach send commandsailin-nemui
2017-02-22Handle file names with quotes.LemonBoy
Let's repurpose escape_string and make it more flexible by letting us choose the characters to escape.
2017-02-15Merge pull request #627 from LemonBoy/ssl-expiryailin-nemui
Check whether the client certificate is expired.