11e9e89341
version 2.0.7
10 years ago
b8b4e105c0
qrexec-lib: return unsigned where only non-negative value is returned
10 years ago
b12f1539a4
Add -Wextra -Werror to all C code
...
Not only the security-critical one.
10 years ago
12a9049cfe
Fix some more -Wextra warnings
10 years ago
03c9cb1388
Add a few consts where appropriate
10 years ago
9f3a74fd77
unpack: prevent ability to bypass the byte limit
...
By passing an empty file with a declared negative size,
a hostile VM can decrease the total bytes counter, while
not have do supply a huge amount of data, thus disabing
the byte size check, and potentially filling the target
filesystem.
10 years ago
b95e80779e
archlinux: Fix missing symlink for archlinux template build
10 years ago
c3f924373a
version 2.0.6
10 years ago
f6ec5e1d8a
Merge branch 'appicons'
...
Conflicts:
rpm_spec/qubes-utils.spec
10 years ago
312637358e
version 2.0.5
10 years ago
759c9da6be
rpm: fix debuginfo package build
10 years ago
20cb2103e5
rpm: package libraries in -libs package
...
There are need for both compiling (where main package is unwanted) and
using (where devel package is unnecessary).
10 years ago
516815a266
qrexec-lib: make it shared library
10 years ago
113826aa1a
qrexec-lib: use registered callbacks
...
...instead of exported symbols of certain name. This is first step to
use change it to shared libraries.
10 years ago
1c6f44d7fa
qrexec-lib: fix compile warnings
10 years ago
be74125d40
udev: hide internal drives from file-selection dialogs
10 years ago
b792a47df4
Merge remote-tracking branch 'woju/master' into appicons
10 years ago
d8f3c64b5d
imgconverter: error in spec
10 years ago
98b7c2f99b
appicons: require ImageMagick
10 years ago
341edffaa6
Merge branch 'master' of git://git.qubes-os.org/marmarek/linux-utils
10 years ago
c34f4c3495
archlinux: updated PKGBUILD scripts based on the rpm spec files
10 years ago
987611683f
version 2.0.4
10 years ago
f7e943f7ec
txrx-vchan: guard against invalid buffer sizes from libvchan
...
These APIs can now return -1 when invalid indices are detected.
10 years ago
59fb8daa03
site-packages/qubes/imgconverter.py
...
This module does three things:
- secure image transfer protocol between VMs
- icon tinting for appmenus
- generic icon (padlock) generation
10 years ago
b51435c903
udev: add locking on block device processing
...
xenstored does handle concurrent writes very harshly - it aborts the
whole transaction if any other write happened the same time. For udev
(which process all the events almost at once) it means hundreds of
retries and in some times even exceed udev timeout (60s or so).
To prevent this problem, add locking to allow only one such event being
processed at once. It looks like it should slow down the system startup,
but actually it does otherwise.
11 years ago
e2c481516e
version 2.0.3
11 years ago
e36f03db2d
unix-server: do not check for unlink() error when creating socket
...
The socket most likely do not exists yet.
11 years ago
c2af41b6b6
version 2.0.2
11 years ago
a2e4f9a8aa
ioall: do not reset file flags when they're already as requested
...
This was changed on a copy of that file elsewhere, might as well
keep this in sync too.
11 years ago
3a39c65e3e
linux-utils: misc const/prototype fixups
11 years ago
af78e8d9e8
unpack: count directory and symlink sizes
...
Also do not rely on unpack being called just once if we don't
have to and initialize counts.
Since we don't know directory size before populating with files,
we just accumulate the size on the second pass, but do not actually
check for the limit being reached. If there's any file after that,
that'll trip the check.
11 years ago
77d34c3096
unix-server: guard against buffer overflow
...
sun_path is fairly small, and while the input is a smaller constant,
you never know how that might change.
11 years ago
21154a3e6b
unix-server: some error checking
11 years ago
9192aa041d
buffer.c: guard against bad input
...
The byte limit would be hit if adding one byte to a buffer
that's half the limit, due to the temporary double copy.
Not sure if that's something that's worth changing.
11 years ago
7f2ac22d49
meminfo-writer: fix high memory check for more than about 150 GB RAM
11 years ago
e6c29bbae1
meminfo-writer: ensure we do not write outside our buffer
...
Reading the max size would cause a NUL to be written after
the buffer, while an error would cause one to be written
before it.
11 years ago
2758d2a1d3
meminfo-writer: kill child if we error out due to failure to write the pid file
11 years ago
1a72505d24
meminfo-writer: simple command line sanity checks
11 years ago
0c718b7f54
meminfo-writer: trivial typo fix
11 years ago
76afc2e72f
meminfo-writer: ensure we always use the first parses memory info
...
It could plausibly be ignored for stupidly large thresholds
11 years ago
7e086970e9
meminfo-writer: make meminfo parsing more robust
...
- ensure we see all the expected fields
- avoid overflowing name buffer on malformed input
- avoid possible overread when the last line is small
11 years ago
2ba46ff17f
meminfo-writer: make buffers const where possible
11 years ago
f0b1271a5e
Include meminfo-writer
...
It is common for dom0 and VM, so keep in one place for both of them.
11 years ago
5afa710f21
version 2.0.1
11 years ago
8cb51d76c9
archlinux: allow static libraries to be packaged
11 years ago
f00c5acb98
version 1.3.2
11 years ago
21612bfadf
qrexec-lib: add support for verbose mode (echo just processed file)
11 years ago
761305bc8b
qrexec-lib: check files limit before processing the file
...
Off-by-one error.
11 years ago
05092fb3e6
version 1.3.1
11 years ago
2ee40f16c2
qrexec-lib: fail peer_client_init call when domain dies
...
Don't wait indefinitely.
11 years ago
Marek Marczykowski-Górecki