summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2017-05-19Remove unnecessary OpenSSL initialization and cleanupMatthias Schiffer
Some of these functions have been deprecated in OpenSSL 1.1; in any case, the calls aren't necessary.
2017-05-19cipher: aes128-ctr: openssl: fix compatiblity with OpenSSL 1.1Matthias Schiffer
2017-03-25status: correctly align sockaddr_un bufferMatthias Schiffer
While at it, also do some more cleanup.
2017-03-02CMakeList: do not overwrite module pathYann E. MORIN
Currently, the CMakeList.txt completely overwrites the CMAKE_MODULE_PATH variable. This is problematic when an upper-layer buildsystem wants to set its own module path to use custom modules. For example, Buldroot [0] provides a custom platform description [1] to fix cross-compilation issue. Overwriting the module path means that this custom platform description is not found [2]. Providing such a custom platform description is what the upstream cmake devs suggest [3], quoting: If a toolchain file specifies CMAKE_SYSTEM_NAME such that a custom `Platform/MySystem.cmake` file is loaded then the latter can set them [*] as needed for the target platform. [*] offending settings causing RPATH issues during cross-compilation. So we need to append our source tree to the module path, not replace it blindly. [0] https://buildroot.org/ [1] https://git.buildroot.org/buildroot/tree/support/misc/Buildroot.cmake [2] http://autobuild.buildroot.net/results/69f/69fb2e3b549a069e2898506db918423e6742c589/build-end.log [3] http://public.kitware.com/pipermail/cmake/2017-February/065063.html Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
2016-11-21typo: there is no word >chosed<, should be >chosen<.Christof Schulze
2016-10-10time, compat: don't redefine clock_gettime on MacOSMatthias Schiffer
MacOS X 10.12 has intruduced a clock_gettime function. Use an own function name instead.
2016-10-10fastd: fix documentation of fastd_context_t.nowMatthias Schiffer
2016-09-15Use raise(...) instead of kill(getpid(), ...)Matthias Schiffer
2016-09-15handshake: fix fastd_handshake_add_uint logicMatthias Schiffer
The function would add multipe records for big values. No actual use of this function did trigger the incorrect behaviour though.
2016-08-08fastd: doc: mtu description - fix wrong packet size for ipv4+nulllemoer
2016-05-03peer: fix potential integer overflows in fastd_peer_eth_addr_addMatthias Schiffer
Fix potential integer overflows in binary search.
2016-05-03vector: catch overflows of the alloc counterMatthias Schiffer
Better fail than go into an endless loop...
2016-05-03alloc: check multiplications for overflowsMatthias Schiffer
2016-03-28Development versionMatthias Schiffer
2016-03-28fastd v18v18Matthias Schiffer
2016-03-27doc: update build instructionsMatthias Schiffer
2016-03-27android: update libuecc to v7, libsodium to 1.0.8Matthias Schiffer
Also, script fixes and cleanup.
2016-03-27build: fix build with nonstandard libsodium include pathMatthias Schiffer
2016-03-26build: fix nacl dependency (without libsodium)Matthias Schiffer
2016-03-26build: fix removal of previously required dependenciesMatthias Schiffer
2016-03-26poll: fix epoll supportMatthias Schiffer
2016-03-26iface: improve error handling, especially on non-Linux systemsMatthias Schiffer
Don't exit when a single interface can't be setup
2016-03-26iface: improve handling of name fieldMatthias Schiffer
2016-03-26doc: update build dependenciesMatthias Schiffer
2016-03-25doc: build-fastd-android: fix fastd build dir existence checkMatthias Schiffer
Just a cosmetic fix.
2016-03-25build: always try to find libraries without CMAKE_FIND_ROOT_PATH firstMatthias Schiffer
Fixes build on Android
2016-03-25Remove gcc-{ar,nm,ranlib} hackMatthias Schiffer
If a GCC version is used which requires the GCC-specific binutils for LTO, they should rather be provided explicitly.
2016-03-25doc: add preliminary v18 release notesMatthias Schiffer
2016-03-20doc: update with new configuration optionsMatthias Schiffer
2016-03-20doc: examples/openwrt: update init script and example config with new optionsMatthias Schiffer
2016-03-20doc: examples/openwrt/fastd.init: print error message when used without ↵Matthias Schiffer
instance arguments
2016-03-20doc: examples/openwrt/fastd.init: add help text for custom commandsMatthias Schiffer
2016-03-20Add missing doxygen commentsMatthias Schiffer
2016-03-20ec25519_fhmqvc: simplify protocol_handle_recv control flowMatthias Schiffer
2016-03-19ec25519_fhmqvc: update to follow new libuecc recommendationsMatthias Schiffer
2016-02-22capabilities: guard packet mark check with USE_PACKET_MARKMatthias Schiffer
At the moment, both capabilities and packet marks are supported on Linux only, so this doesn't really matter except for testing.
2016-02-22capabilities: print message about retained capabilitiesMatthias Schiffer
2016-02-22Retain CAP_NET_ADMIN if a packet mark is configured and dynamic binds are ↵Matthias Schiffer
required
2016-02-22Add "drop privileges force" option which allows to drop CAP_NET_ADMIN even ↵Matthias Schiffer
when fastd thinks it might still need it
2016-02-22Improve capability handling, retain required capabilitiesMatthias Schiffer
2016-02-22Update copyright yearsMatthias Schiffer
2016-02-22socket: improve and simplify error handlingMatthias Schiffer
Rather exit on errors we're unlikely to recover from than retrying indefinitely.
2016-02-22peer: remove dead code in fastd_peer_reset_socket()Matthias Schiffer
2016-02-22types: replace static consts with definesMatthias Schiffer
2016-02-22Handle optional features (capabilities, status socket) more consistentlyMatthias Schiffer
2016-02-21Print UID and GID as unsigned in log messageMatthias Schiffer
2016-02-21Replace setuid/setgid with setresuid/setresgid (or setreuid/setregid)Matthias Schiffer
The semantics of setuid in SUID processes are not entirely clear on all Unix-like systems. Better use setresuid to drop privileges where available.
2015-12-21Don't block fatal signalsMatthias Schiffer
2015-12-21Terminate with the received signalMatthias Schiffer
2015-11-25log: clean up fastd_logfMatthias Schiffer
Also, return early when no log destination would get the message anyways.