Commit Graph

  • f50c1d59c4 defence-in-depth: bound wire-supplied counts and lengths Andrew Tridgell 2025-12-31 12:56:54 +11:00
  • 9ad27c9d7b token: harden compressed-token decoding against integer overflow Andrew Tridgell 2026-04-29 11:10:59 +10:00
  • 74ea276900 clientserver: fix hostname ACL bypass when using daemon chroot Andrew Tridgell 2025-12-31 13:50:35 +11:00
  • 0cac014f89 testsuite: end-to-end regression test for chdir-symlink-race Andrew Tridgell 2026-05-05 14:34:50 +10:00
  • 0a5fa00fdc receiver: add parent_ndx<0 guard, mirroring 797e17f Andrew Tridgell 2026-05-05 16:48:16 +10:00
  • 90495eecd0 util1+syscall: secure copy_file source/dest opens; bare-path defence-in-depth Andrew Tridgell 2026-05-06 09:45:30 +10:00
  • 4255413e0c testsuite: cover 'refuse options = compress' for the daemon Andrew Tridgell 2026-05-01 10:56:17 +10:00
  • 72a6634479 syscall: add symlink-race-safe do_*_at() wrappers and harden secure_relative_open Andrew Tridgell 2026-05-05 15:02:48 +10:00
  • 901041dddc token: harden compressed-token decoding against integer overflow Andrew Tridgell 2026-04-29 11:10:59 +10:00
  • a2c1b98c2a util1: secure change_dir() against symlink-race chdir-escape Andrew Tridgell 2026-05-05 14:34:33 +10:00
  • 7c8a647c2e testsuite: end-to-end regression test for chdir-symlink-race Andrew Tridgell 2026-05-05 14:34:50 +10:00
  • d870b43a32 syscall+receiver: secure receiver-side do_chmod against symlink-race TOCTOU Andrew Tridgell 2026-05-04 21:53:14 +10:00
  • a277a06b10 util1+syscall: secure copy_file source/dest opens; bare-path defence-in-depth Andrew Tridgell 2026-05-06 09:45:30 +10:00
  • e57fd03284 sender: fix read-path TOCTOU by opening from module root (CVE-2026-29518) Andrew Tridgell 2026-03-01 09:28:40 +11:00
  • 39b3074a1a syscall: add symlink-race-safe do_*_at() wrappers and harden secure_relative_open Andrew Tridgell 2026-05-05 15:02:48 +10:00
  • f629772cc6 syscall+clientserver: am_chrooted and use_secure_symlinks for daemon-no-chroot (CVE-2026-29518) Andrew Tridgell 2025-12-31 10:01:23 +11:00
  • d22b6bc7d1 util1: secure change_dir() against symlink-race chdir-escape Andrew Tridgell 2026-05-05 14:34:33 +10:00
  • 24852cda3d syscall+receiver: secure receiver-side do_chmod against symlink-race TOCTOU Andrew Tridgell 2026-05-04 21:53:14 +10:00
  • 99b36291d0 sender: fix read-path TOCTOU by opening from module root (CVE-2026-29518) Andrew Tridgell 2026-03-01 09:28:40 +11:00
  • 1a5ad81add syscall+clientserver: am_chrooted and use_secure_symlinks for daemon-no-chroot (CVE-2026-29518) Andrew Tridgell 2025-12-31 10:01:23 +11:00
  • 2b3f8aacc7 testsuite: skip symlink-dirlink-basis on platforms without RESOLVE_BENEATH Andrew Tridgell 2026-04-30 09:00:09 +10:00
  • 61d987c54a syscall: also use O_RESOLVE_BENEATH on FreeBSD and MacOS Andrew Tridgell 2026-04-30 08:44:11 +10:00
  • 72d1cf1c28 syscall: use openat2(RESOLVE_BENEATH) on Linux for secure_relative_open Andrew Tridgell 2026-04-30 08:39:22 +10:00
  • 9ba21f638c testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper Andrew Tridgell 2026-04-30 08:18:01 +10:00
  • acf4b7b839 call tzset() before chroot to cache timezone data Andrew Tridgell 2026-04-22 12:53:13 +10:00
  • 968d4c0cd0 xattrs: fixed count in qsort Andrew Tridgell 2026-04-22 09:57:45 +10:00
  • d69162dbf4 zero all new memory from allocations Andrew Tridgell 2026-04-22 10:59:11 +10:00
  • cad6aab534 fix signed integer overflow in proxy protocol v2 header parsing Andrew Tridgell 2026-04-16 10:50:49 +10:00
  • 7ab20b293f zlib: convert K&R function definitions to ANSI style Andrew Tridgell 2026-04-16 13:40:59 +10:00
  • c822d0c404 Fix glibc-2.43 constness warnings Holger Hoffstätte 2026-04-06 00:44:02 +02:00
  • f8d8bba793 fix uninitialized mul_one in AVX2 checksum and add SIMD checksum test Andrew Tridgell 2026-03-01 08:42:04 +11:00
  • 43e2af4dd3 acl: fixed ACL ID mapping for non-root Andrew Tridgell 2026-01-19 11:14:40 +11:00
  • 50f0add12a reject negative token values in compressed stream receivers Andrew Tridgell 2025-12-30 18:49:34 +11:00
  • ada7ba004f fix uninitialized buf1 in get_checksum2() MD4 path Andrew Tridgell 2025-12-30 16:21:41 +11:00
  • 41213d20d1 fixed an invalid access to files array Andrew Tridgell 2025-08-23 17:26:53 +10:00
  • 03d0b41e64 testsuite: added clean-fname-underflow test Andrew Tridgell 2025-08-23 18:29:06 +10:00
  • 934a6bec96 util: fixed issue in clean_fname() Andrew Tridgell 2025-08-23 19:14:59 +10:00
  • 841ab71c7c configure.ac: check for xattr support both in libc and in -lattr Eli Schwartz 2025-04-22 16:17:55 -04:00
  • ae1bc1b9e7 Using a correct time in log file Michal Ruprich 2025-01-31 14:35:18 +01:00
  • 350d39a05d options.c: Fix segv if poptGetContext returns NULL Ronnie Sahlberg 2025-01-30 13:27:38 +10:00
  • 9141bf1d83 syscall: fix a Y2038 bug by replacing Int32x32To64 with multiplication Silent 2025-01-13 15:01:06 +01:00
  • ad7dc53795 fixed symlink race condition in sender Andrew Tridgell 2024-12-18 08:59:42 +11:00
  • 5ddf470275 make --safe-links stricter Andrew Tridgell 2024-11-23 15:15:53 +11:00
  • de7a95a775 range check dir_ndx before use Andrew Tridgell 2024-11-26 16:12:45 +11:00
  • 14026162dc Refuse a duplicate dirlist. Wayne Davison 2024-11-14 15:46:50 -08:00
  • 16666c6e75 disallow ../ elements in relpath for secure_relative_open Andrew Tridgell 2024-11-26 09:16:31 +11:00
  • 866dd7131e receiver: use secure_relative_open() for basis file Andrew Tridgell 2024-11-23 12:28:13 +11:00
  • b31301abb7 added secure_relative_open() Andrew Tridgell 2024-11-23 12:26:10 +11:00
  • 769e5f0bcf refuse fuzzy options when fuzzy not selected Andrew Tridgell 2024-11-23 11:08:03 +11:00
  • ce06002ce8 prevent information leak off the stack Andrew Tridgell 2024-11-14 09:57:08 +11:00
  • 9119310d01 Another cast when multiplying integers. Wayne Davison 2024-11-05 11:01:03 -08:00
  • 147c7a0d97 Some checksum buffer fixes. Wayne Davison 2024-10-29 22:55:29 -07:00
  • 77b7f5e0aa Fix warning about missing bomb(..) prototype Holger Hoffstätte 2023-09-04 14:05:21 +02:00
  • 292d9de105 bool is a keyword in C23 Michal Ruprich 2025-01-17 12:37:57 +01:00
  • f1cf29cefa hlink: Fix function pointer cast in qsort() Charalampos Mitrodimas 2024-11-20 14:55:50 +02:00
  • 9585830e1e Fix warning about conflicting lseek/lseek64 prototypes Holger Hoffstätte 2023-09-04 14:07:14 +02:00
  • 6226386332 testsuite: skip symlink-dirlink-basis on platforms without RESOLVE_BENEATH Andrew Tridgell 2026-04-30 09:00:09 +10:00
  • b32ba3ddb3 syscall: also use O_RESOLVE_BENEATH on FreeBSD and MacOS Andrew Tridgell 2026-04-30 08:44:11 +10:00
  • 45ce54b546 syscall: use openat2(RESOLVE_BENEATH) on Linux for secure_relative_open Andrew Tridgell 2026-04-30 08:39:22 +10:00
  • 3e5e159459 testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper Andrew Tridgell 2026-04-30 08:18:01 +10:00
  • 892b48a60b call tzset() before chroot to cache timezone data Andrew Tridgell 2026-04-22 12:53:13 +10:00
  • c009fcc8e6 xattrs: fixed count in qsort Andrew Tridgell 2026-04-22 09:57:45 +10:00
  • dff93c92d1 zero all new memory from allocations Andrew Tridgell 2026-04-22 10:59:11 +10:00
  • c35df318ad fix signed integer overflow in proxy protocol v2 header parsing Andrew Tridgell 2026-04-16 10:50:49 +10:00
  • 09187a49a7 zlib: convert K&R function definitions to ANSI style Andrew Tridgell 2026-04-16 13:40:59 +10:00
  • 6994fdf50e Fix glibc-2.43 constness warnings Holger Hoffstätte 2026-04-06 00:44:02 +02:00
  • 350469f7cf fix uninitialized mul_one in AVX2 checksum and add SIMD checksum test Andrew Tridgell 2026-03-01 08:42:04 +11:00
  • 79ffc5e3c5 acl: fixed ACL ID mapping for non-root Andrew Tridgell 2026-01-19 11:14:40 +11:00
  • 4585f8a6f2 reject negative token values in compressed stream receivers Andrew Tridgell 2025-12-30 18:49:34 +11:00
  • 487a548f70 fix uninitialized buf1 in get_checksum2() MD4 path Andrew Tridgell 2025-12-30 16:21:41 +11:00
  • 82fe213f7f fixed an invalid access to files array Andrew Tridgell 2025-08-23 17:26:53 +10:00
  • 0df583089d testsuite: added clean-fname-underflow test Andrew Tridgell 2025-08-23 18:29:06 +10:00
  • 21e0496559 util: fixed issue in clean_fname() Andrew Tridgell 2025-08-23 19:14:59 +10:00
  • ca987c47fb configure.ac: check for xattr support both in libc and in -lattr Eli Schwartz 2025-04-22 16:17:55 -04:00
  • c966f3864d Using a correct time in log file Michal Ruprich 2025-01-31 14:35:18 +01:00
  • bbecd5bc1a options.c: Fix segv if poptGetContext returns NULL Ronnie Sahlberg 2025-01-30 13:27:38 +10:00
  • 4ce604114a syscall: fix a Y2038 bug by replacing Int32x32To64 with multiplication Silent 2025-01-13 15:01:06 +01:00
  • 86c59ba944 bool is a keyword in C23 Michal Ruprich 2025-01-17 12:37:57 +01:00
  • b9cc0c6176 ci(almalinux-8): use python39 module for runtests.py Andrew Tridgell 2026-05-07 05:34:54 +10:00
  • c60550bff9 ci: add Ubuntu 22.04 and AlmaLinux 8 workflows for backporting Andrew Tridgell 2026-05-07 05:27:45 +10:00
  • 67f1dcf604 testsuite: run protected-regular test as non-root using unshare Andrew Tridgell 2026-04-22 12:36:50 +10:00
  • 79fd7d5885 Start 3.4.3dev going. Andrew Tridgell 2026-04-30 09:34:22 +10:00
  • dfdcd8f851 ci: add symlink-dirlink-basis to Cygwin's expected-skipped list Andrew Tridgell 2026-04-30 09:22:58 +10:00
  • 04e2fc2c76 testsuite: skip symlink-dirlink-basis on platforms without RESOLVE_BENEATH Andrew Tridgell 2026-04-30 09:00:09 +10:00
  • 7f60ec001a syscall: also use O_RESOLVE_BENEATH on FreeBSD and MacOS Andrew Tridgell 2026-04-30 08:44:11 +10:00
  • 4fa7156ccd syscall: use openat2(RESOLVE_BENEATH) on Linux for secure_relative_open Andrew Tridgell 2026-04-30 08:39:22 +10:00
  • dcf364dac5 testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper Andrew Tridgell 2026-04-30 08:18:01 +10:00
  • d1eff8f0dc ci: add OpenBSD and NetBSD build jobs, run 'make check' on the BSDs Andrew Tridgell 2026-04-30 08:02:26 +10:00
  • 8f727166d9 runtests.py: error early when test helper programs are missing Andrew Tridgell 2026-04-29 11:35:47 +10:00
  • 5bcb3deb2f packaging: remove old release system Andrew Tridgell 2026-04-28 14:53:29 +10:00
  • de3cc03b03 Preparing for release of 3.4.2 [buildall] v3.4.2 Andrew Tridgell 2026-04-28 14:29:48 +10:00
  • 006ee327d6 packaging: new release script Andrew Tridgell 2026-04-28 14:27:41 +10:00
  • 9b6363fa10 update NEWS.md ready for 3.4.2 Andrew Tridgell 2026-04-22 14:33:43 +10:00
  • 9e2f0fe9ae packaging: remove support for rsync-patches Andrew Tridgell 2026-04-28 12:54:31 +10:00
  • 4f6e4ea64a Do not clean DISPLAY unconditionally Michal Ruprich 2025-09-08 09:49:22 +02:00
  • 567c40935f call tzset() before chroot to cache timezone data Andrew Tridgell 2026-04-22 12:53:13 +10:00
  • 8e11f0c169 Using a correct time in log file Michal Ruprich 2025-01-31 14:35:18 +01:00
  • e9dbc8d66d rsyncd.conf: document the temp dir parameter Andrew Tridgell 2026-04-22 12:14:29 +10:00
  • bd2dbd2f32 runtests.py: preserve test-execution order in skipped list Andrew Tridgell 2026-04-22 12:21:48 +10:00
  • 350e295d1c runtests.py: add -j/--parallel option for parallel test execution Andrew Tridgell 2026-04-22 12:07:31 +10:00