<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/NetworkManager.git, branch 1.43.2-dev</title>
<subtitle>gitlab.freedesktop.org: NetworkManager/NetworkManager.git
</subtitle>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/'/>
<entry>
<title>release: bump version to 1.43.2 (development)</title>
<updated>2023-02-10T08:38:34+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-10T08:38:33+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=72c0ae2efac71cb435938d75ef7faa5fd59ab9ce'/>
<id>72c0ae2efac71cb435938d75ef7faa5fd59ab9ce</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>NEWS: update</title>
<updated>2023-02-10T08:37:36+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-10T08:37:21+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=c74c16ee21165ca27e982eecfba8d188ff1289cb'/>
<id>c74c16ee21165ca27e982eecfba8d188ff1289cb</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>release: bump version to 1.42.0</title>
<updated>2023-02-10T08:14:28+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-10T08:14:28+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=119ed52038f8b6e8cebb92314acf6e6bb5813fb0'/>
<id>119ed52038f8b6e8cebb92314acf6e6bb5813fb0</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>NEWS: update</title>
<updated>2023-02-10T08:02:17+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-10T08:02:17+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=d452ecc3e72ad95b350ff789ade04d7094cb3404'/>
<id>d452ecc3e72ad95b350ff789ade04d7094cb3404</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>contrib: accept ssh:// git url for origin in "nm-setup-git.sh"</title>
<updated>2023-02-09T18:22:37+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-09T18:22:37+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=46f39829d9bb8dd21b553a833e347efa79cbece3'/>
<id>46f39829d9bb8dd21b553a833e347efa79cbece3</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>glib-aux: drop usage of malloc_usable_size() in nm_free_secret()</title>
<updated>2023-02-09T13:08:13+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-08T11:15:41+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=6e7fb78b18bbe984b7ef7b5a7358fe79f053e456'/>
<id>6e7fb78b18bbe984b7ef7b5a7358fe79f053e456</id>
<content type='text'>
The idea of nm_free_secret() is to clear the secrets from memory. That
surely is some layer of extra snake oil, because we tend to pass secrets
via D-Bus, where the memory gets passed down to (D-Bus) libraries which
have no idea to keep it private. Still...

But turns out, malloc_usable_size() might not actually be usable for
this. Read the discussion at [1].

Stop using malloc_usable_size(), which seems unfortunate.

There is probably no secret relevant data after the NUL byte anyway,
because we tend to create such strings once, and don't rewrite/truncate
them afterwards (which would leave secrets behind as garbage).

Note that systemd's erase_and_free() still uses malloc_usable_size()
([2]) but the macro foo to get that right is terrifying ([3]).

[1] https://github.com/systemd/systemd/issues/22801#issuecomment-1343041481
[2] https://github.com/systemd/systemd/blob/11c0f0659ecd82572c2dc83f3b34493a36dcd954/src/basic/memory-util.h#L101
[3] https://github.com/systemd/systemd/commit/7929e180aa47a2692ad4f053afac2857d7198758

Fixes: d63cd26e6042 ('shared: improve nm_free_secret() to clear entire memory buffer')
(cherry picked from commit 8b66865a88af7bf835147d66c309dae008507c36)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The idea of nm_free_secret() is to clear the secrets from memory. That
surely is some layer of extra snake oil, because we tend to pass secrets
via D-Bus, where the memory gets passed down to (D-Bus) libraries which
have no idea to keep it private. Still...

But turns out, malloc_usable_size() might not actually be usable for
this. Read the discussion at [1].

Stop using malloc_usable_size(), which seems unfortunate.

There is probably no secret relevant data after the NUL byte anyway,
because we tend to create such strings once, and don't rewrite/truncate
them afterwards (which would leave secrets behind as garbage).

Note that systemd's erase_and_free() still uses malloc_usable_size()
([2]) but the macro foo to get that right is terrifying ([3]).

[1] https://github.com/systemd/systemd/issues/22801#issuecomment-1343041481
[2] https://github.com/systemd/systemd/blob/11c0f0659ecd82572c2dc83f3b34493a36dcd954/src/basic/memory-util.h#L101
[3] https://github.com/systemd/systemd/commit/7929e180aa47a2692ad4f053afac2857d7198758

Fixes: d63cd26e6042 ('shared: improve nm_free_secret() to clear entire memory buffer')
(cherry picked from commit 8b66865a88af7bf835147d66c309dae008507c36)
</pre>
</div>
</content>
</entry>
<entry>
<title>NEWS: update</title>
<updated>2023-02-09T12:05:25+00:00</updated>
<author>
<name>Lubomir Rintel</name>
<email>lkundrak@v3.sk</email>
</author>
<published>2023-01-31T00:50:46+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=769c55b2deffed4b4108bf4ddb31c3028bab3316'/>
<id>769c55b2deffed4b4108bf4ddb31c3028bab3316</id>
<content type='text'>
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1521
(cherry picked from commit 479e4dbfeeb524b0e64f1be231fe831169514c6a)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1521
(cherry picked from commit 479e4dbfeeb524b0e64f1be231fe831169514c6a)
</pre>
</div>
</content>
</entry>
<entry>
<title>NEWS: update</title>
<updated>2023-02-09T11:53:10+00:00</updated>
<author>
<name>Lubomir Rintel</name>
<email>lkundrak@v3.sk</email>
</author>
<published>2023-01-31T00:50:46+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=479e4dbfeeb524b0e64f1be231fe831169514c6a'/>
<id>479e4dbfeeb524b0e64f1be231fe831169514c6a</id>
<content type='text'>
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1521
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1521
</pre>
</div>
</content>
</entry>
<entry>
<title>logging/trivial: add code comment about logging "&lt;level&gt; [timestamp]"</title>
<updated>2023-02-09T10:59:43+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-09T10:59:43+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=226848ea62ebcb336fceabf8d22d6fa42d2a10c5'/>
<id>226848ea62ebcb336fceabf8d22d6fa42d2a10c5</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>NEWS: update</title>
<updated>2023-02-08T19:52:24+00:00</updated>
<author>
<name>Thomas Haller</name>
<email>thaller@redhat.com</email>
</author>
<published>2023-02-08T19:52:24+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/NetworkManager.git/commit/?id=5bc7789c4ac5d157774895707df13ce4eb89f759'/>
<id>5bc7789c4ac5d157774895707df13ce4eb89f759</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
