Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-07-25 | resolve: fix segmentation fault with musl >1.1.20HEADmaster | David Bauer | |
When compiled with musl >1.1.20, fastd will crash in case it can't resolve a peers hostname. This is due to a changed implementation of freeaddrinfo in musl 1.1.21 onwards. This segfault is fixed by not calling freeaddrinfo in case the supplied pointer is null. Signed-off-by: David Bauer <mail@david-bauer.net> | |||
2018-05-12 | status: fix segfault in tun/multitap mode with persist iface no | Matthias Schiffer | |
2017-10-18 | cipher: remove aes128-ctr NaCl implementation | Matthias Schiffer | |
New versions of libsodium have dropped support for aes128-ctr. AES support is only available with OpenSSL now. | |||
2017-05-19 | Remove unnecessary OpenSSL initialization and cleanup | Matthias Schiffer | |
Some of these functions have been deprecated in OpenSSL 1.1; in any case, the calls aren't necessary. | |||
2017-05-19 | cipher: aes128-ctr: openssl: fix compatiblity with OpenSSL 1.1 | Matthias Schiffer | |
2017-03-25 | status: correctly align sockaddr_un buffer | Matthias Schiffer | |
While at it, also do some more cleanup. | |||
2016-10-10 | time, compat: don't redefine clock_gettime on MacOS | Matthias Schiffer | |
MacOS X 10.12 has intruduced a clock_gettime function. Use an own function name instead. | |||
2016-10-10 | fastd: fix documentation of fastd_context_t.now | Matthias Schiffer | |
2016-09-15 | Use raise(...) instead of kill(getpid(), ...) | Matthias Schiffer | |
2016-09-15 | handshake: fix fastd_handshake_add_uint logic | Matthias Schiffer | |
The function would add multipe records for big values. No actual use of this function did trigger the incorrect behaviour though. | |||
2016-05-03 | peer: fix potential integer overflows in fastd_peer_eth_addr_add | Matthias Schiffer | |
Fix potential integer overflows in binary search. | |||
2016-05-03 | vector: catch overflows of the alloc counter | Matthias Schiffer | |
Better fail than go into an endless loop... | |||
2016-05-03 | alloc: check multiplications for overflows | Matthias Schiffer | |
2016-03-27 | build: fix build with nonstandard libsodium include path | Matthias Schiffer | |
2016-03-26 | poll: fix epoll support | Matthias Schiffer | |
2016-03-26 | iface: improve error handling, especially on non-Linux systems | Matthias Schiffer | |
Don't exit when a single interface can't be setup | |||
2016-03-26 | iface: improve handling of name field | Matthias Schiffer | |
2016-03-20 | Add missing doxygen comments | Matthias Schiffer | |
2016-03-20 | ec25519_fhmqvc: simplify protocol_handle_recv control flow | Matthias Schiffer | |
2016-03-19 | ec25519_fhmqvc: update to follow new libuecc recommendations | Matthias Schiffer | |
2016-02-22 | capabilities: guard packet mark check with USE_PACKET_MARK | Matthias Schiffer | |
At the moment, both capabilities and packet marks are supported on Linux only, so this doesn't really matter except for testing. | |||
2016-02-22 | capabilities: print message about retained capabilities | Matthias Schiffer | |
2016-02-22 | Retain CAP_NET_ADMIN if a packet mark is configured and dynamic binds are ↵ | Matthias Schiffer | |
required | |||
2016-02-22 | Add "drop privileges force" option which allows to drop CAP_NET_ADMIN even ↵ | Matthias Schiffer | |
when fastd thinks it might still need it | |||
2016-02-22 | Improve capability handling, retain required capabilities | Matthias Schiffer | |
2016-02-22 | Update copyright years | Matthias Schiffer | |
2016-02-22 | socket: improve and simplify error handling | Matthias Schiffer | |
Rather exit on errors we're unlikely to recover from than retrying indefinitely. | |||
2016-02-22 | peer: remove dead code in fastd_peer_reset_socket() | Matthias Schiffer | |
2016-02-22 | types: replace static consts with defines | Matthias Schiffer | |
2016-02-22 | Handle optional features (capabilities, status socket) more consistently | Matthias Schiffer | |
2016-02-21 | Print UID and GID as unsigned in log message | Matthias Schiffer | |
2016-02-21 | Replace setuid/setgid with setresuid/setresgid (or setreuid/setregid) | Matthias Schiffer | |
The semantics of setuid in SUID processes are not entirely clear on all Unix-like systems. Better use setresuid to drop privileges where available. | |||
2015-12-21 | Don't block fatal signals | Matthias Schiffer | |
2015-12-21 | Terminate with the received signal | Matthias Schiffer | |
2015-11-25 | log: clean up fastd_logf | Matthias Schiffer | |
Also, return early when no log destination would get the message anyways. | |||
2015-11-18 | Unify periodic handshakes and peer maintenance | Matthias Schiffer | |
2015-11-18 | Clean up peer task handling | Matthias Schiffer | |
2015-11-17 | Use task queue for peer resets and keepalives | Matthias Schiffer | |
This makes it unnecessary to iterate over all peers for maintenance, and desynchronizes different peers' keepalives. | |||
2015-11-16 | Call ethernet address cleanup from generic maintenance task | Matthias Schiffer | |
2015-11-10 | Add lots of missing doxygen comments | Matthias Schiffer | |
2015-11-10 | Implement generic task queue to handle handshakes and maintenance | Matthias Schiffer | |
2015-11-10 | pqueue: remove some unnessasary assignments | Matthias Schiffer | |
2015-11-10 | Remove now unused doubly-linked list implementation | Matthias Schiffer | |
2015-11-10 | Use heap-based priority queue to schedule handshakes instead of a linked list | Matthias Schiffer | |
2015-11-10 | Add efficient priority queue implementation | Matthias Schiffer | |
2015-11-09 | Destroy interfaces on OpenBSD as well | Matthias Schiffer | |
2015-11-09 | Implement interface cleanup on FreeBSD | Matthias Schiffer | |
Based-on-patch-by: Julian Kornberger <jk+github@digineo.de> | |||
2015-11-09 | Add generic interface cleanup infrastructure | Matthias Schiffer | |
Some systems (like FreeBSD) don't delete TUN/TAP interfaces after closing, add some infrastructure to do that. | |||
2015-11-09 | Check return value of sodium_init() | Matthias Schiffer | |
Fixes a warning with -Wunused-result. | |||
2015-11-09 | Use a global ioctl socket | Matthias Schiffer | |
Based-on-patch-by: Julian Kornberger <jk+github@digineo.de> |