<feed xmlns='http://www.w3.org/2005/Atom'>
<title>eurephia.git/plugin, branch beta</title>
<subtitle>Unnamed repository; edit this file to name it for gitweb.</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/'/>
<entry>
<title>Restrict log length of mac address</title>
<updated>2009-10-13T12:37:24+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-13T12:29:57+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=cb36a1434c9ebdfa926bc3980c33f4a94b106964'/>
<id>cb36a1434c9ebdfa926bc3980c33f4a94b106964</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Always process certificate depth as integer</title>
<updated>2009-10-13T12:37:24+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-13T12:25:50+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=c6621d108bb8beb97ca6185c0c11d4fbffab5a1b'/>
<id>c6621d108bb8beb97ca6185c0c11d4fbffab5a1b</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Fixed memory leak in the firewall implementation and added mlock() usage</title>
<updated>2009-10-06T15:54:59+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-06T15:54:59+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=3a2290433a654a8b5f07a1db1f8142ec01ca57a7'/>
<id>3a2290433a654a8b5f07a1db1f8142ec01ca57a7</id>
<content type='text'>
The memory leak was caused by not freeing the shadow context the firewall
child process uses for logging.  In addition this child process had a
connection to the database open as well, which was not needed.  This
connection is now disconnected immediately after the child process has
started.

Added also usage of mlock() to protect sensitive information from being
swapped out to disk.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The memory leak was caused by not freeing the shadow context the firewall
child process uses for logging.  In addition this child process had a
connection to the database open as well, which was not needed.  This
connection is now disconnected immediately after the child process has
started.

Added also usage of mlock() to protect sensitive information from being
swapped out to disk.
</pre>
</div>
</content>
</entry>
<entry>
<title>Added missing doxygen comments to environment.h</title>
<updated>2009-10-05T16:09:57+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-05T16:09:57+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=473070ef1a145e67ec37a58650134c0ff1e9d23c'/>
<id>473070ef1a145e67ec37a58650134c0ff1e9d23c</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Use macros to extract values via get_env()</title>
<updated>2009-10-04T22:01:18+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-04T22:01:18+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=164032f3fcf86d4f08244764aab1b68a0fb6c71e'/>
<id>164032f3fcf86d4f08244764aab1b68a0fb6c71e</id>
<content type='text'>
This has two purposes.  To make the code more readable and to use the
same maximum length of the data being retrieved from the environment table.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This has two purposes.  To make the code more readable and to use the
same maximum length of the data being retrieved from the environment table.
</pre>
</div>
</content>
</entry>
<entry>
<title>Only DEBUG log what get_env() will return</title>
<updated>2009-10-04T22:00:23+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-04T22:00:23+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=8f8632ef5f8e63cc9495550c09605d4cc9c58de8'/>
<id>8f8632ef5f8e63cc9495550c09605d4cc9c58de8</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Moved the get_env() function into its own file</title>
<updated>2009-10-04T21:23:07+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-04T21:23:07+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=af7c53924fffc20b63c7fca26ec8b103d724e58b'/>
<id>af7c53924fffc20b63c7fca26ec8b103d724e58b</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Restrict input data length for plug-in arguments from openvpn</title>
<updated>2009-10-04T21:13:06+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-04T21:13:06+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=53611ee129ab91c60f61a591b32e46bfac39abf7'/>
<id>53611ee129ab91c60f61a591b32e46bfac39abf7</id>
<content type='text'>
This only affects functions related to MAC address and certificate depth
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This only affects functions related to MAC address and certificate depth
</pre>
</div>
</content>
</entry>
<entry>
<title>Tightening the building of the seeddata string even more</title>
<updated>2009-10-02T21:27:09+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-02T21:27:09+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=e2f140c24d0e5c1ed246ee6abc437f26f2424b08'/>
<id>e2f140c24d0e5c1ed246ee6abc437f26f2424b08</id>
<content type='text'>
This is a follow up of commit 80b41e27b7361633bee17c64bbb95490dc94ab9f
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is a follow up of commit 80b41e27b7361633bee17c64bbb95490dc94ab9f
</pre>
</div>
</content>
</entry>
<entry>
<title>Fixed possible integer overflow issue</title>
<updated>2009-10-02T21:12:45+00:00</updated>
<author>
<name>David Sommerseth</name>
<email>dazo@users.sourceforge.net</email>
</author>
<published>2009-10-02T21:12:45+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/dsommers/public_git/eurephia.git/commit/?id=80b41e27b7361633bee17c64bbb95490dc94ab9f'/>
<id>80b41e27b7361633bee17c64bbb95490dc94ab9f</id>
<content type='text'>
The eDBopen_session_seed() function was prune to an integer overflow issue, if
the input data (some which comes from clients) exeeds the size_t max value which
calloc() uses (via malloc_nullsafe()).  The totlen variable was in addition defined
as int and the totlen value was multiplied by 2.

The fix was to use the maximum values used when calling get_env().  These values the
maximum can then be added together to retrieve the maximum length of the seeddata string.
This should also make the execution go slightly quicker as strlen_nullsafe() is no
longer called for each of the input variables.  In addition, there are no reasons to
multiply the totlen value by two as it did.

Credit goes to Larry Highsmith for noticing this potential problem.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The eDBopen_session_seed() function was prune to an integer overflow issue, if
the input data (some which comes from clients) exeeds the size_t max value which
calloc() uses (via malloc_nullsafe()).  The totlen variable was in addition defined
as int and the totlen value was multiplied by 2.

The fix was to use the maximum values used when calling get_env().  These values the
maximum can then be added together to retrieve the maximum length of the seeddata string.
This should also make the execution go slightly quicker as strlen_nullsafe() is no
longer called for each of the input variables.  In addition, there are no reasons to
multiply the totlen value by two as it did.

Credit goes to Larry Highsmith for noticing this potential problem.
</pre>
</div>
</content>
</entry>
</feed>
