| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | sudo_regex_compile_v1 stub: set errstr on error | Todd C. Miller | 2022-02-25 | 1 | -1/+3 | |
| | | ||||||
| * | fuzz_logsrvd_conf: add stub version of sudo_regex_compile_v1(). | Todd C. Miller | 2022-02-25 | 2 | -2/+21 | |
| | | | | | We want to fuzz our parser, not the libc regular expression code. | |||||
| * | iolog_seekto: initialize struct timing_closure before using. | Todd C. Miller | 2022-02-23 | 1 | -0/+3 | |
| | | | | | Coverity CID 249977 | |||||
| * | iolog_rewrite: initialize struct timing_closure before using. | Todd C. Miller | 2022-02-23 | 1 | -0/+3 | |
| | | | | | Coverity CID 249971 | |||||
| * | Do not disable fuzzer output if SUDO_FUZZ_VERBOSE env variable is set. | Todd C. Miller | 2022-02-22 | 1 | -1/+2 | |
| | | ||||||
| * | store_iobuf_local: fix potential double free on the error path. | Todd C. Miller | 2022-02-10 | 1 | -2/+3 | |
| | | ||||||
| * | Add missing default return in last commit. | Todd C. Miller | 2022-02-03 | 1 | -0/+2 | |
| | | ||||||
| * | sudo_logsrvd: make sure journal exists before writing the alert message. | Todd C. Miller | 2022-02-03 | 1 | -1/+7 | |
| | | | | | Fixes a potential NULL dereference when journaling an alert message. | |||||
| * | Work around a glibc regcomp() bug with repeated '+' operators. | Todd C. Miller | 2022-02-01 | 1 | -0/+255 | |
| | | | | | | Glibc regcomp() has a bug where it uses excessive memory for repeated '+' ops. Collapse them to avoid running the fuzzer out of memory. | |||||
| * | Rebase seed corpus on updated sudo_logsrvd.conf example. | Todd C. Miller | 2022-02-01 | 6 | -20/+255 | |
| | | ||||||
| * | Fix parsing of "retry_interval" in the relay section. | Todd C. Miller | 2022-02-01 | 1 | -0/+17 | |
| | | | | | | The setting was present but the callback was missing so it could not be parsed in the conf file. | |||||
| * | Use TIME_T_MAX as the upper limit when parsing timeouts. | Todd C. Miller | 2022-02-01 | 1 | -9/+9 | |
| | | ||||||
| * | Check for garbage after [section] in sudo_logsrvd.conf. | Todd C. Miller | 2022-01-29 | 1 | -4/+11 | |
| | | ||||||
| * | Sync fuzzing dictionary with current configuration keyword list. | Todd C. Miller | 2022-01-29 | 1 | -0/+2 | |
| | | ||||||
| * | Add new log_passwords and passprompt_regex settings. | Todd C. Miller | 2022-01-28 | 3 | -17/+93 | |
| | | | | | | | | | When logging terminal input, if log_passwords is false and any of the regular expressions in the passprompt_regex list are found in the terminal output, terminal input will be replaced with '*' characters until a newline or carriage return is found in the input or an output character is received. | |||||
| * | Avoid TOCTOU in sudo_mkdir_parents() using openat(2) and mkdirat(2). | Todd C. Miller | 2021-12-11 | 1 | -2/+1 | |
| | | | | | This also allows us to make path const as it should be. | |||||
| * | Add configure check for sha1sum and use "openssh dgst -sha1" if missing. | Todd C. Miller | 2021-11-10 | 1 | -1/+2 | |
| | | | | | Only needed when building the seed corpus zip files. | |||||
| * | Use iolog_openat() when opening the log.json file in the I/O log dir. | Todd C. Miller | 2021-10-27 | 1 | -1/+1 | |
| | | ||||||
| * | Use BIO_new_file() not BIO_new_fd() to read dhparams file. | Todd C. Miller | 2021-10-26 | 1 | -8/+5 | |
| | | | | | | Older versions of OpenSSL and wolfSSL lack BIO_new_fd(). Also explicitly include openssl/bio.h and openssl/dh.h for wolfSSL. | |||||
| * | Add support for WolfSSL's OpenSSL compatibility layer. | Todd C. Miller | 2021-10-25 | 8 | -31/+26 | |
| | | | | | Based on changes from Hayden Roche | |||||
| * | Move include of log_server.pb-c.h into logsrvd.h and sendlog.h | Todd C. Miller | 2021-10-25 | 11 | -9/+2 | |
| | | | | | | This way there is no include file order issue with the PROTOBUF_C_VERSION_NUMBER check. | |||||
| * | Use SSL_FILETYPE_PEM with SSL_CTX_use_PrivateKey_file, not X509_FILETYPE_PEM | Todd C. Miller | 2021-10-24 | 1 | -1/+1 | |
| | | | | | | While they are defined to the same value in OpenSSL one should not rely on this. | |||||
| * | sudo_sendlog: send runenv, rungid and runuid from log.json too | Todd C. Miller | 2021-10-23 | 1 | -67/+130 | |
| | | | | | | With this change, sudo_sendlog can now round-trip sudo-style I/O logs that use the newer log.json format without losing any information. | |||||
| * | Make sure INET_ADDRSTRLEN and INET6_ADDRSTRLEN are defined. | Todd C. Miller | 2021-10-21 | 1 | -0/+7 | |
| | | ||||||
| * | sudo_sendlog: send multiple I/O log records together if possible | Todd C. Miller | 2021-10-20 | 1 | -62/+88 | |
| | | | | | | Try to fill the write buffer and then send to the server instead of sending records one at a time. | |||||
| * | sudo_sendlog: support multiple write buffers like sudo_logsrvd | Todd C. Miller | 2021-10-20 | 2 | -45/+90 | |
| | | ||||||
| * | Fix potential use-after-free when calling iolog_flush_all(). | Todd C. Miller | 2021-10-19 | 1 | -4/+4 | |
| | | | | | | | We need to call iolog_flush_all() _before_ scheduling the commit point. If we fail to schedule to commit point, the closure will be freed. Coverity CID 220557 | |||||
| * | sendlog: use runargv from log.json if available | Todd C. Miller | 2021-10-19 | 1 | -6/+54 | |
| | | ||||||
| * | sudo_sendlog: send exit data in eventlog if present | Todd C. Miller | 2021-10-19 | 1 | -9/+24 | |
| | | ||||||
| * | No longer need to pass exit params to eventlog_exit(), use struct eventlog. | Todd C. Miller | 2021-10-19 | 1 | -23/+23 | |
| | | | | | | Now that struct eventlog includes the exit parameters we can simplify how eventlog_exit() is called. | |||||
| * | Read command run_time, signal and exit_value from I/O log log.json file. | Todd C. Miller | 2021-10-19 | 1 | -0/+1 | |
| | | ||||||
| * | Log the command run-time and exit status in the I/O log. | Todd C. Miller | 2021-10-19 | 1 | -0/+104 | |
| | | ||||||
| * | Handle a missing run_time in an ExitMessage. | Todd C. Miller | 2021-10-18 | 1 | -4/+8 | |
| | | | | | It is now possible to pass a NULL run_time to eventlog_exit(). | |||||
| * | No need to flush logs before commit point if we flush after each write. | Todd C. Miller | 2021-10-16 | 1 | -1/+4 | |
| | | | | | | Also document that logs are flushed before sending a commit point even when flushing is disabled. | |||||
| * | Flush I/O logs before we send a commit point. | Todd C. Miller | 2021-10-15 | 3 | -1/+22 | |
| | | | | | | | The commit point message means we have written the data to disk so we should not be buffering it any longer. We do not currently fsync(2) the data after flushing, perhaps we should. | |||||
| * | Do not treat a resume point of [0, 0] as an error. | Todd C. Miller | 2021-10-15 | 1 | -1/+18 | |
| | | | | | | | If the connecton is interrupted before sudo sends back a commit_point message, resuming at [0, 0] is correct. Also add a warning on unexpected EOF parsing the timing file. | |||||
| * | regenerate dependencies | Todd C. Miller | 2021-10-10 | 1 | -2/+4 | |
| | | ||||||
| * | Use a consistent version of fuzz_conversation() with all fuzzers. | Todd C. Miller | 2021-09-28 | 1 | -0/+19 | |
| | | | | | Also undo a change to fuzz_sudoers.c that snuck in to the last commit. | |||||
| * | Fuzzers should not produce output. | Todd C. Miller | 2021-09-28 | 1 | -0/+12 | |
| | | | | | Excessive output makes the fuzzer runs much less efficient. | |||||
| * | expand_buf: fix conditional for when we need to preserve existing data | Todd C. Miller | 2021-09-28 | 1 | -2/+4 | |
| | | | | | | | | It is possible for the buffer offset to be zero when the length is non-zero. The proper value to use is the same as is used for the memcpy/memmove size. Fixes buffer corruption caused by a very long command line that usually results in a dropped connection. | |||||
| * | Reuse existing journal file for an accepted/rejected sub-command. | Todd C. Miller | 2021-09-20 | 1 | -2/+9 | |
| | | | | | | | Otherwise we end up with zero-length files in the incoming queue dir and may end up relaying one of those instead of the actual journal file. | |||||
| * | sudo_logsrvd: only send log ID for first command of a session | Todd C. Miller | 2021-09-20 | 1 | -2/+3 | |
| | | | | | There is no need to send the log ID for each sub-command. | |||||
| * | tls_init.c: use SSL_CTX_set0_tmp_dh_pkey if present. | Todd C. Miller | 2021-09-17 | 1 | -21/+84 | |
| | | | | | | Fixes a warning on OpenSSL 3.0 and plugs a memory leak of dhparams on config reload. | |||||
| * | sudo_debug_register: add minfd argument to specify lowest fd number | Todd C. Miller | 2021-08-26 | 2 | -3/+3 | |
| | | | | | | Use this in sudo_intercept.so to avoid allocating a low-numbered fd which the shell reserves for use by scripts. | |||||
| * | Replace messages like "unknown foo: %s" with "unknown foo %s". | Todd C. Miller | 2021-08-19 | 1 | -3/+3 | |
| | | | | | | The colon really doesn't belong there; we generally use a colon to separate a message from the warning detail. | |||||
| * | Sync warning messages with sudoers/logging.c | Todd C. Miller | 2021-08-19 | 1 | -3/+3 | |
| | | | | | Avoids 3 translation strings that were effectively duplicated. | |||||
| * | Print the section when warning about an illegal key in the conf file. | Todd C. Miller | 2021-08-16 | 1 | -1/+2 | |
| | | | | | | This should make it easier to tell when a setting is present in the wrong section. | |||||
| * | Set umask to be less restrictive before creating parent directories. | Todd C. Miller | 2021-08-14 | 4 | -6/+38 | |
| | | | | | | Otherwise we could end up creating them with a more restrictive mode than indended. Coverity CID 221592 | |||||
| * | store_alert_local: fix memory leak on error path | Todd C. Miller | 2021-08-14 | 1 | -8/+11 | |
| | | | | | Coverity CID 238642 | |||||
| * | store_accept_local: fix return value on error | Todd C. Miller | 2021-08-14 | 1 | -1/+1 | |
| | | ||||||
 |
index : delta/sudo.git | |
| www.sudo.ws: repos/sudo |
| summaryrefslogtreecommitdiff |