tor/src/or
cypherpunks be0891667e Fix undefined behavior caused by memory overlap
The tor_cert_get_checkable_sig function uses the signing key included in
the certificate (if available) when a separate public key is not given.

When the signature is valid, the tor_cert_checksig function copies the
public key from the checkable structure to the public key field of the
certificate signing key.

In situations where the separate public key is not given but the
certificate includes a signing key, the source and destination pointers
in the copy operation are equal and invoke undefined behavior.

Undefined behaviour is avoided by ensuring both pointers are different.
2015-11-30 22:02:22 -05:00
..
addressmap.c Merge branch 'bug7555_v2_squashed' 2015-01-19 11:43:41 -05:00
addressmap.h Allow MapAddress and Automap to work together 2015-01-13 12:41:15 -05:00
buffers.c Remove remaining references to "nulterminate" in comments 2015-09-02 08:50:26 -04:00
buffers.h Remove the unused "nulterminate" option to buf_pullup() 2015-09-01 14:36:25 -04:00
channel.c properly delete current channel in channel_free_list 2015-09-01 15:10:10 +02:00
channel.h Tests for AUTHENTICATE cell functionality. 2015-05-28 10:41:50 -04:00
channeltls.c Appease make check-spaces 2015-06-01 12:59:14 +00:00
channeltls.h Tests for AUTHENTICATE cell functionality. 2015-05-28 10:41:50 -04:00
circpathbias.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circpathbias.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitbuild.c Reachability should check ExtendAllowPrivateAddresses not TestingTorNetwork 2015-04-22 23:54:21 +10:00
circuitbuild.h fix a compilation warning 2015-02-11 15:10:35 -05:00
circuitlist.c Fix misnamed parameter in or_circuit_new docstring. 2015-08-06 06:05:07 +00:00
circuitlist.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux_ewma.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitmux_ewma.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuitstats.c Implement EVENT_NETWORK_LIVENESS 2015-05-17 13:42:57 +00:00
circuitstats.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
circuituse.c Add KeepAliveIsolateSOCKSAuth as a SOCKSPort option. 2015-09-08 14:02:08 -04:00
circuituse.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
command.c Remove redundant tor_free() in command_process_create_cell(). 2015-08-17 09:26:07 -04:00
command.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
config.c Allow conflicts to occur in keypinning journal 2015-09-23 11:02:21 -04:00
config.h Merge branch '12498_ed25519_keys_v6' 2015-05-28 11:04:33 -04:00
confparse.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
confparse.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
connection.c Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
connection.h Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
connection_edge.c Logs and debug info that I used for finding bug 16844 2015-08-17 14:34:50 -04:00
connection_edge.h Make check-spaces happier. 2015-01-19 11:56:03 -05:00
connection_or.c Memory leak on error in connection_or_compute_auth_cell_body. CID 1301372 2015-05-28 12:51:20 -04:00
connection_or.h Start testing cell encoders/processers for the v3 handshake. 2015-05-28 10:41:50 -04:00
control.c Merge branch 'workqueue_squashed' 2015-08-21 10:37:01 -04:00
control.h Rename EVENT_SIGNAL -> EVENT_GOT_SIGNAL 2015-08-20 18:42:20 -04:00
cpuworker.c Ensure worker threads actually exit when it is time 2015-08-21 10:36:53 -04:00
cpuworker.h Refactor cpuworker to use workqueue/threadpool code. 2015-01-14 11:23:34 -05:00
dircollate.c Fix typo in double_digest_map type 2015-08-18 08:18:44 -04:00
dircollate.h Appease make check-spaces 2015-06-01 12:59:14 +00:00
directory.c Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options 2015-07-10 09:05:26 -04:00
directory.h whitespace fixes 2015-01-23 11:18:28 -05:00
dirserv.c New AuthDirPinKeys option to enable/disable keypinning enforcement 2015-09-23 11:22:26 -04:00
dirserv.h Refactor TestingDirAuthVote* into dirserv_set_routerstatus_testing 2015-08-18 14:54:40 +10:00
dirvote.c Fix some types on container fns 2015-08-13 22:14:14 -04:00
dirvote.h Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options 2015-07-10 09:05:26 -04:00
dns.c Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
dns.h Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
dns_structs.h Unit test dns_resolve(), dns_clip_ttl(), dns_get_expiry_ttl(). 2015-08-23 16:02:39 +03:00
dnsserv.c Move entry_port_cfg_t fields in entry_connection_t 2015-01-16 09:22:58 -05:00
dnsserv.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
entrynodes.c Fix some conversion problems 2015-04-23 09:16:42 -04:00
entrynodes.h clean up comments and whitespace a bit 2015-02-18 19:27:02 -05:00
eventdns_tor.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
ext_orport.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
ext_orport.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
fp_pair.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
fp_pair.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
geoip.c Merge branch 'bug6852' 2015-02-03 13:06:58 -05:00
geoip.h Merge branch 'bug6852' 2015-02-03 13:06:58 -05:00
hibernate.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
hibernate.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
include.am No spaces around = in variable assignment 2015-09-29 10:09:02 +02:00
keypin.c New AuthDirPinKeys option to enable/disable keypinning enforcement 2015-09-23 11:22:26 -04:00
keypin.h New AuthDirPinKeys option to enable/disable keypinning enforcement 2015-09-23 11:22:26 -04:00
main.c Merge remote-tracking branch 'origin/maint-0.2.6' into maint-0.2.7 2015-10-15 13:56:41 -04:00
main.h Merge remote-tracking branches 'public/decouple_lost_owner' and 'public/decouple_signals' 2015-08-17 16:24:45 -04:00
Makefile.nmake Implement scheduler mechanism to track lists of channels wanting cells or writes; doesn't actually drive the cell flow from it yet 2014-09-30 22:48:24 -07:00
microdesc.c Fix a stupid memory leak I introduced in 8afbc154. Bug not in any released Tor. 2015-08-17 09:42:35 -04:00
microdesc.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
networkstatus.c Remove the HidServDirV2 and VoteOnHidServDirectoriesV2 options 2015-07-10 09:05:26 -04:00
networkstatus.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
nodelist.c Improve log messages for problems about ed25519 keypinning 2015-07-31 10:47:39 -04:00
nodelist.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
ntmain.c Wrap windows-only C files in #ifdef _WIN32 2015-07-30 11:14:15 -04:00
ntmain.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
onion.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_fast.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_fast.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_ntor.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_ntor.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_tap.c Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
onion_tap.h Merge remote-tracking branch 'public/bug9635_warnings_025' 2015-02-02 16:31:32 -05:00
or.h Allow conflicts to occur in keypinning journal 2015-09-23 11:02:21 -04:00
policies.c Put braces around reject-lines for IPv6 addrs 2015-09-24 16:51:25 -04:00
policies.h ExitPolicyRejectPrivate rejects local IPv6 address and interface addresses 2015-09-16 02:56:50 +10:00
reasons.c Add string for IP_NOW_REDUNDANT in circuit_end_reason_to_control_string 2015-01-15 11:53:20 -05:00
reasons.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
relay.c Logs and debug info that I used for finding bug 16844 2015-08-17 14:34:50 -04:00
relay.h Remove lingering mempool code 2015-02-23 11:19:31 -05:00
rendcache.c Whoops; infinite recursion 2015-10-21 10:56:27 -04:00
rendcache.h Expire after 5 minutes rend cache failure entries 2015-08-11 09:34:41 -04:00
rendclient.c Fix a bunch of check-spaces complaints 2015-08-21 10:36:53 -04:00
rendclient.h Use an enum for INTRO_POINT_FAILURE_* 2015-08-11 09:34:41 -04:00
rendcommon.c Rename ambiguous introduction point functions 2015-07-14 02:29:17 -04:00
rendcommon.h Use an enum for INTRO_POINT_FAILURE_* 2015-08-11 09:34:41 -04:00
rendmid.c ... and if we do get multiple INTRODUCE1s on a circuit, kill the circuit 2015-04-03 09:40:47 -04:00
rendmid.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
rendservice.c Fix: use the right list in find_expiring_intro_point() 2015-11-23 09:02:54 -05:00
rendservice.h Remove empty rend_service_validate_intro_early function 2015-07-14 02:30:04 -04:00
rephist.c Add link protocol version counts to the heartbeat message 2015-03-10 10:07:41 -04:00
rephist.h Add link protocol version counts to the heartbeat message 2015-03-10 10:07:41 -04:00
replaycache.c Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
replaycache.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
router.c ExitPolicyRejectPrivate rejects local IPv6 address and interface addresses 2015-09-16 02:56:50 +10:00
router.h Split the client-only parts of init_keys() into a separate function 2015-08-11 10:41:20 -04:00
routerkeys.c Fix a memory leak in reading an expired ed signing key. 2015-10-21 11:16:28 -04:00
routerkeys.h Merge branch 'feature16769_squashed' 2015-09-22 09:26:30 -04:00
routerlist.c Make our digest-mismatch warnings a touch better 2015-09-24 17:45:33 -04:00
routerlist.h Implement proposal 228: cross-certification with onion keys 2015-05-28 10:40:57 -04:00
routerparse.c Fix a memory leak in router_parse_addr_policy_item_from_string. CID 1324770 2015-09-22 09:55:05 -04:00
routerparse.h Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes 2015-09-16 00:13:03 +10:00
routerset.c Ignore accept6/reject6 IPv4, warn about unexpected rule outcomes 2015-09-16 00:13:03 +10:00
routerset.h Prohibit the use of one entry node with an HS 2015-09-02 10:47:20 -04:00
scheduler.c Fix scheduler compilation on targets where char is unsigned. 2015-02-06 16:26:28 +00:00
scheduler.h Fix scheduler compilation on targets where char is unsigned. 2015-02-06 16:26:28 +00:00
statefile.c Merge branch 'master' of https://git.torproject.org/tor into bug13111-empty-key-files-fn-empty 2015-01-10 17:20:06 +11:00
statefile.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
status.c Add link protocol version counts to the heartbeat message 2015-03-10 10:07:41 -04:00
status.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00
tor_main.c Only return 0..255 from main(). 2015-09-03 11:38:00 -04:00
torcert.c Fix undefined behavior caused by memory overlap 2015-11-30 22:02:22 -05:00
torcert.h Generate weird certificates correctly 2015-05-28 10:47:47 -04:00
transports.c Implement "TOR_PT_EXIT_ON_STDIN_CLOSE". 2015-03-26 12:55:12 +00:00
transports.h Bump copyright dates to 2015, in case someday this matters. 2015-01-02 14:27:39 -05:00