Edward Tomasz Napierala
a29eeaa9f2
Fix trailing slash handling for capsicum_irclogs_path.
...
This is mostly an anti-footshooting measure, but still.
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
7f2697d307
Cosmetics.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
8c04c2be14
Fix build without Capsicum.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
12e2c46d6a
Add wrappers to reduce #ifdefs.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
c00d4753ae
Restrict port range available in capability mode.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
e777ae986d
Working autolog.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
241dd66ac1
Working /log and /rawlog.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
939371aa1d
Fix warnings.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
1f57ceec4c
Prevent the user from calling "/capsicum enter" twice.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
509eca76f0
Make DNS work in capability mode.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
f4546be7ec
Reorder functions.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
925240155e
Config file support for "capsicum" parameter.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
cec68557aa
/connect works - although only with IP addresses.
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
3200c381db
Rename to "/capability enter" and "/capability status".
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
d5d45c29b8
Add capability mode error/success messages.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
56c94570b4
Implement /cap_enter.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 23:52:23 +01:00
Edward Tomasz Napierala
2914498b29
Consistency: use FALSE instead of 0.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 10:42:53 +01:00
Edward Tomasz Napierala
08dc6734b9
When rawlog open fails, there's no point in trying to write. Don't.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29 10:40:42 +01:00
Edward Tomasz Napierala
42b5e89f6e
Add missing diagnostics for rawlog open().
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28 04:49:14 +01:00
Edward Tomasz Napierala
e08e2bd87a
Don't compute log_dir_create_mode in three different places.
...
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28 03:56:02 +01:00
Nei
f67e766934
Merge branch 'fix-11' into 'security'
...
Correct GHashTable usage
See merge request !16
2017-07-05 14:46:42 +00:00
Nei
fc3615120d
Merge branch 'fix-10' into 'security'
...
Check return value of localtime
See merge request !15
2017-07-05 14:46:24 +00:00
ailin-nemui
73b851c39c
correct GHashTable usage
2017-07-04 16:11:45 +02:00
ailin-nemui
1656dc1e54
Merge pull request #653 from ailin-nemui/regexex
...
Enable UTF8 in GRegex
2017-07-03 09:53:09 +02:00
Nei
29ebac987d
Check return value of localtime
...
Fixes #10
2017-06-29 13:48:44 +00:00
dequis
7354a74c65
parse_time_interval: Allow negative time in settings
...
This splits sign parsing out of parse_time_interval_uint() so that the
negative sign is applied outside of the unsigned context where the
number parsing is done, and after all the checks that it's lower than
(1 << 31)
This fixes issues with settings like `server_reconnect_time`,
`server_connect_timeout` and `lag_max_before_disconnect`, which accepted
-1 as a valid value.
2017-06-17 15:34:36 -03:00
ailin-nemui
4edfccfce7
get rid of new_text
2017-06-05 13:46:43 +02:00
ailin-nemui
48899a123d
Update iregex-gregex.c
...
add 2 comments about new_string
2017-06-05 10:23:16 +02:00
ailin-nemui
00354c3651
Update iregex-gregex.c
...
make helper functions static
2017-06-05 10:10:38 +02:00
ailin-nemui
79bbca4644
Refactor regex and implement UTF8 mode for GRegex
...
- with non-unicode byte to Private Use Area A mapping
- move all ifdefs to iregex.h file only
2017-06-04 00:52:53 +02:00
dequis
632b0ce5e6
Add parse_uint function to improve integer overflow handling
...
Originally found by oss-fuzz (issue 525) in get_ansi_color using ubsan.
After a lot of analysis I'm 99% sure this isn't security relevant so
it's fine to handle this publicly.
The fix is mainly adding a function that does it right and use it
everywhere. This is harder than it seems because the strtol() family of
functions doesn't have the friendliest of interfaces.
Aside from get_ansi_color(), there were other pieces of code that used
the same (out*10+(*in-'0')) pattern, like the parse_size() and
parse_time_interval() functions, which are mostly used for settings.
Those are interesting cases, since they multiply the parsed number
(resulting in more overflows) and they write to a signed integer
parameter (which can accidentally make the uints negative without UB)
Thanks to Pascal Cuoq for enlightening me about the undefined behavior
of parse_size (and, in particular, the implementation-defined behavior
of one of the WIP versions of this commit, where something like signed
integer overflow happened, but it was legal). Also for writing
tis-interpreter, which is better than ubsan to verify these things.
2017-05-18 00:21:11 -03:00
ailin-nemui
371eb7f505
expand macro
2017-05-12 16:27:33 +02:00
ailin-nemui
787e192567
improve nicklist performance
2017-05-12 13:36:48 +02:00
Joseph Bisch
a4cc4e0ad7
Fix off by one error with char_expandos
2017-03-31 15:37:48 -04:00
dequis
93c158d815
expand_escape: expand double backslash as a backslash
2017-03-08 20:01:05 -03:00
ailin-nemui
ddba68ad77
Merge pull request #659 from ailin-nemui/foreach_dontspam
...
make foreach send commands
2017-03-07 23:37:23 +01:00
ailin-nemui
62fd3ac180
Revert "Quote the filename when dcc requests are auto accepted."
2017-03-06 11:27:55 +01:00
ailin-nemui
29f27cfb39
Merge pull request #658 from LemonBoy/dcc-autoaccept
...
Quote the filename when dcc requests are auto accepted.
2017-03-04 21:43:21 +01:00
LemonBoy
dc99f8d7a5
Properly check the command arguments in tail place.
...
A command requiring an argument and given in tail position would not
raise an error but silently set the value to the empty string ''.
2017-03-04 21:37:13 +01:00
ailin-nemui
9aaa6449a0
make foreach send commands
2017-02-27 13:43:58 +01:00
LemonBoy
027acffb42
Handle file names with quotes.
...
Let's repurpose escape_string and make it more flexible by letting us
choose the characters to escape.
2017-02-22 11:49:09 +01:00
ailin-nemui
540639e0fa
Merge pull request #627 from LemonBoy/ssl-expiry
...
Check whether the client certificate is expired.
2017-02-15 15:49:00 +01:00
LemonBoy
c067f8e99b
Do not alias /server <hostname> to /server connect <hostname>
...
Closes #559 .
2017-02-14 23:02:05 +01:00
ailin-nemui
653c7fb05a
Merge pull request #622 from ailin-nemui/starttls
...
provide net_start_ssl api
2017-02-06 12:38:20 +01:00
ailin-nemui
28df637055
provide net_start_ssl api
...
fixes #615
2017-02-05 23:08:42 +01:00
LemonBoy
73e8a065bd
Support OpenSSL 1.1.0.
...
- X509_get_notBefore becomes X509_get0_notBefore
- X509_get_notAfter becomes X509_get0_notAfter
- ASN1_STRING_data becomes ASN1_STRING_get0_data (and drops the const)
- The whole library is now initialized by OPENSSL_init_ssl
Closes #597
2017-02-03 13:29:19 +01:00
LemonBoy
697dd19d88
Check whether the client certificate is expired.
...
Right now we only warn the user, the connection keeps going.
Fixes #211
2017-01-22 21:58:55 +01:00
dequis
752f484c6c
Add OPENSSL_NO_EC for solaris 11.3, see issue #598
...
Original patch by 'Slarky'
According to that ticket, the next major version of solaris won't need
this. Consider reverting this when solaris 11.3 stops being relevant.
2017-01-06 11:47:24 -03:00
ailin-nemui
33107be748
fix GRegex GError problem
2017-01-05 13:06:55 +01:00
Ailin Nemui
f5cbbebc2e
switch for gregex and regex.h
2017-01-03 12:29:11 +01:00