Commit Graph

Select branches

Hide Pull Requests

352-release

b3.0.x

daemon-unix-stdin

fix/rsync-ssl-socat-transport

master

nice-process-priorities

pr-VFS

pr-fix-ia64-strlcpy

pr-maintainer-updates

pr-release-3.4.0

pr-remove-alloca-dep

rework-workflows

solaris-o-cloexec

symlink-chmod-unsupported

v3.2.7-sec-patches

v3.2.7-sec-patches3

v3.2.7-sec-patches4

v3.4-stable

v3.4.1-sec-patches

v3.4.1-sec-patches3

v3.4.1-sec-patches4

v34-stable-testsuite

#1

#10

#1000

#1001

#1001/merge

#1003

#1004

#1005

#1006

#1007

#1007/merge

#1008

#1008/merge

#1009

#1010

#1011

#1012

#1013

#1014

#1016

#1016/merge

#1017

#1018

#1018/merge

#1019

#1019/merge

#102

#1022

#1022/merge

#1024

#1026

#1027

#1028

#1029

#1029/merge

#103

#1030

#1030/merge

#1031

#1031/merge

#1032

#1034

#1034/merge

#1036

#1036/merge

#1038

#1039

#104

#1040

#1041

#1042

#1043

#1043/merge

#1047

#1048

#1049

#1051

#1052

#1054

#1055

#1057

#1058

#1059

#1060

#1061

#1062

#1063

#1065

#1069

#1070

#1071

#1072

#1073

#1074

#1075

#1077

#1078

#108

#1082

#1085

#1088

#1091

#1092

#1093

#1094

#1096

#1098

#1101

#1102

#1102/merge

#1106

#1108

#1109

#1109/merge

#1110

#1113

#1114

#1116

#1120

#1121

#1122

#1122/merge

#1124

#1125

#1127

#1129

#1130

#1132

#1133

#1136

#1137

#1138

#1139

#1140

#1141

#1142

#1144

#1145

#1145/merge

#1146

#1148

#1148/merge

#12

#124

#137

#155

#16

#160

#161

#174

#175

#178

#179

#18

#191

#198

#198/merge

#2

#20

#201

#204

#206

#210

#212

#214

#216

#22

#220

#23

#235

#238

#24

#241

#247

#25

#250

#252

#259

#265

#268

#273

#28

#290

#291

#291/merge

#293

#294

#295

#3

#300

#302

#305

#306

#307

#308

#31

#311

#316

#320

#327

#334

#339

#35

#358

#36

#369

#37

#374

#377

#38

#389

#39

#390

#390/merge

#393

#4

#424

#426

#426/merge

#428

#442

#442/merge

#459

#461

#465

#473

#473/merge

#475

#476

#477

#478

#482

#482/merge

#487

#487/merge

#49

#5

#501

#501/merge

#504

#504/merge

#513

#514

#514/merge

#521

#523

#523/merge

#536

#539

#54

#540

#542

#543

#55

#551

#551/merge

#554

#554/merge

#557

#558

#559

#581

#585

#586

#588

#59

#591

#592

#593

#594

#595

#595/merge

#6

#601

#608

#608/merge

#61

#610

#610/merge

#612

#614

#62

#623

#623/merge

#639

#639/merge

#64

#65

#656

#656/merge

#66

#665

#67

#68

#681

#687

#69

#690

#693

#694

#696

#698

#700

#703

#705

#706

#707

#709

#711

#712

#716

#719

#719/merge

#726

#728

#73

#730

#731

#736

#737

#74

#740

#744

#747

#747/merge

#75

#751

#751/merge

#753

#757

#757/merge

#766

#771

#778

#779

#780

#780/merge

#781

#781/merge

#790

#791

#794

#795

#796

#796/merge

#800

#800/merge

#801

#801/merge

#803

#803/merge

#807

#816

#816/merge

#817

#822

#822/merge

#826

#831

#835

#836

#840

#840/merge

#844

#852

#852/merge

#853

#857

#858

#859

#861

#864

#867

#872

#873

#874

#875

#876

#877

#878

#879

#881

#883

#885

#886

#887

#888

#890

#892

#893

#893/merge

#894

#894/merge

#895

#898

#9

#901

#902

#903

#906

#907

#908

#909

#909/merge

#913

#914

#916

#917

#918

#918/merge

#919

#920

#921

#923

#925

#93

#930

#931

#932

#933

#935

#937

#938

#939

#939/merge

#942

#943

#945

#946

#947

#947/merge

#948

#948/merge

#952

#953

#954

#955

#956

#957

#958

#960

#961

#962

#963

#964

#965

#966

#967

#967/merge

#969

#970

#971

#972

#973

#974

#975

#976

#977

#978

#979

#980

#981

#981/merge

#982

#982/merge

#983

#984

#984/merge

#985

#985/merge

#986

#987

#988

#989

#99

#990

#991

#992

#993

#994

#995

#996

#996/merge

#998

#999

mbp_bk_export0

v1.6.4

v1.6.5

v1.6.6

v1.6.7

v1.6.8

v1.6.9

v1.7.0

v1.7.1

v1.7.2

v1.7.3

v1.7.4

v2.0.0

v2.0.1

v2.0.10

v2.0.11

v2.0.12

v2.0.13

v2.0.14

v2.0.15

v2.0.16

v2.0.17

v2.0.18

v2.0.19

v2.0.2

v2.0.3

v2.0.4

v2.0.5

v2.0.6

v2.0.7

v2.0.8

v2.0.9

v2.1.0

v2.1.1

v2.2.0

v2.2.1

v2.3.0

v2.3.1

v2.3.2

v2.3.3

v2.3.3pre1

v2.4.0

v2.4.1

v2.4.2

v2.4.3

v2.4.4

v2.4.5

v2.4.6

v2.4.7pre1

v2.4.7pre2

v2.4.7pre4

v2.4.8

v2.4.8pre1

v2.5.0

v2.5.1

v2.5.1pre1

v2.5.1pre2

v2.5.1pre3

v2.5.2

v2.5.2pre1

v2.5.2pre2

v2.5.2pre3

v2.5.3

v2.5.3pre1

v2.5.4

v2.5.4pre1

v2.5.5

v2.5.5.rc1

v2.5.6

v2.5.7

v2.6.0

v2.6.0pre1

v2.6.0pre2

v2.6.1

v2.6.1pre1

v2.6.1pre2

v2.6.2

v2.6.2pre1

v2.6.3

v2.6.3pre1

v2.6.3pre2

v2.6.4

v2.6.4pre1

v2.6.4pre2

v2.6.4pre3

v2.6.4pre4

v2.6.5

v2.6.5pre1

v2.6.5pre2

v2.6.6

v2.6.6pre1

v2.6.7

v2.6.7pre1

v2.6.7pre2

v2.6.7pre3

v2.6.8

v2.6.8pre1

v2.6.9

v2.6.9pre1

v2.6.9pre2

v2.6.9pre3

v3.0.0

v3.0.0pre1

v3.0.0pre10

v3.0.0pre2

v3.0.0pre3

v3.0.0pre4

v3.0.0pre5

v3.0.0pre6

v3.0.0pre7

v3.0.0pre8

v3.0.0pre9

v3.0.1

v3.0.1pre1

v3.0.1pre2

v3.0.1pre3

v3.0.2

v3.0.3

v3.0.3pre1

v3.0.3pre2

v3.0.3pre3

v3.0.4

v3.0.4pre1

v3.0.4pre2

v3.0.5

v3.0.5pre1

v3.0.5pre2

v3.0.6

v3.0.6pre1

v3.0.7

v3.0.7pre1

v3.0.7pre2

v3.0.8

v3.0.8pre1

v3.0.9

v3.0.9pre1

v3.0.9pre2

v3.1.0

v3.1.0pre1

v3.1.1

v3.1.1pre1

v3.1.1pre2

v3.1.2

v3.1.2pre1

v3.1.3

v3.1.3pre1

v3.2.0

v3.2.0pre1

v3.2.0pre2

v3.2.0pre3

v3.2.1

v3.2.1pre1

v3.2.2

v3.2.2pre1

v3.2.2pre2

v3.2.2pre3

v3.2.3

v3.2.3pre1

v3.2.4

v3.2.4pre1

v3.2.4pre2

v3.2.4pre3

v3.2.4pre4

v3.2.5

v3.2.5pre1

v3.2.5pre2

v3.2.6

v3.2.7

v3.2.7-sec-patches1

v3.2.7pre1

v3.3.0

v3.3.0pre1

v3.4

v3.4.0

v3.4.1

v3.4.1-sec-patches1

v3.4.2

v3.4.3

v3.4.4

v3.5.0

v3.5.1

v3.5.2

Mono Color

• 399cf1aa5d generator: fix build warning Greg Kroah-Hartman 2026-06-15 14:50:42 +02:00
• 4f7003edd0 io: defer in_multiplexed=1 in the other write-side read_a_msg cases Andrew Tridgell 2026-06-15 17:39:14 +10:00
• ff544c6920 io: defer in_multiplexed=1 in the other write-side read_a_msg cases Andrew Tridgell 2026-06-15 17:39:14 +10:00
• 71515fe874 io: ensure argv has room for the trailing NULL in read_args Andrew Tridgell 2026-06-15 16:40:18 +10:00
• e0fae47c46 io: defer in_multiplexed=1 past MSG_NOOP/MSG_IO_ERROR call-outs Andrew Tridgell 2026-06-15 16:32:03 +10:00
• dadecc8e1e exclude: count trailing backslash in add_implied_include Andrew Tridgell 2026-06-15 16:28:19 +10:00
• b47530c9a8 match: clamp peer-supplied s->flength to local len in append mode Andrew Tridgell 2026-06-15 16:16:20 +10:00
• 032eed6181 match: re-check .len == l before substituting want_i in hash_search Andrew Tridgell 2026-06-15 16:14:38 +10:00
• eeef7529c0 options: clamp snprintf length before err_buf[len] write in parse_size_arg Andrew Tridgell 2026-06-14 09:41:06 +02:00
• 18f0536862 log: drop receiver-side assert(!is_utf8) reachable via peer MSG_INFO Andrew Tridgell 2026-06-14 09:00:56 +02:00
• 1f777fd1cb exclude: cap merge-file include recursion depth Andrew Tridgell 2026-06-15 07:54:37 +10:00
• 64026d953c flist: refuse sub-flist after the final flist has been freed Andrew Tridgell 2026-06-13 10:27:17 +02:00
• 54bd8de60c flist: refuse FLAG_HLINKED on directory entries Andrew Tridgell 2026-06-13 10:09:00 +02:00
• 3baec738b8 log: do not dereference F_SUM() for %C on a deleted-entry log line Andrew Tridgell 2026-06-13 09:48:37 +02:00
• 07acd4961a flist: gate FLAG_HLINKED on preserve_hard_links in recv_file_entry Andrew Tridgell 2026-06-13 09:22:47 +02:00
• f89bd22473 recv_files: refuse transfer-phase ndx that targets a cleared flist entry Andrew Tridgell 2026-06-12 23:37:53 +02:00
• 3330d9171b flist: refuse sub-flist for a cleared dir_flist slot Andrew Tridgell 2026-06-12 23:30:35 +02:00
• 7920d3907d hlink: reject undeclared cross-flist gnum instead of assert() Andrew Tridgell 2026-06-12 23:18:22 +02:00
• 2ab4d2c6e6 lib/pool_alloc: fence chunks with an ASan redzone to catch pool underflows Andrew Tridgell 2026-06-15 09:20:33 +10:00
• ffc91be590 io: ensure argv has room for the trailing NULL in read_args Andrew Tridgell 2026-06-15 16:40:18 +10:00
• e3986e768f io: defer in_multiplexed=1 past MSG_NOOP/MSG_IO_ERROR call-outs Andrew Tridgell 2026-06-15 16:32:03 +10:00
• 355c115e80 exclude: count trailing backslash in add_implied_include Andrew Tridgell 2026-06-15 16:28:19 +10:00
• 9491aafdac match: clamp peer-supplied s->flength to local len in append mode Andrew Tridgell 2026-06-15 16:16:20 +10:00
• 8c1d0d3820 match: re-check .len == l before substituting want_i in hash_search Andrew Tridgell 2026-06-15 16:14:38 +10:00
• ada5da09e2 options: clamp snprintf length before err_buf[len] write in parse_size_arg Andrew Tridgell 2026-06-14 09:41:06 +02:00
• 578afbb857 log: drop receiver-side assert(!is_utf8) reachable via peer MSG_INFO Andrew Tridgell 2026-06-14 09:00:56 +02:00
• f41a92e76c exclude: cap merge-file include recursion depth Andrew Tridgell 2026-06-15 07:54:37 +10:00
• 47addd8609 flist: refuse sub-flist after the final flist has been freed Andrew Tridgell 2026-06-13 10:27:17 +02:00
• 2db471207e flist: refuse FLAG_HLINKED on directory entries Andrew Tridgell 2026-06-13 10:09:00 +02:00
• 2626e20777 log: do not dereference F_SUM() for %C on a deleted-entry log line Andrew Tridgell 2026-06-13 09:48:37 +02:00
• 3c49c401cd flist: gate FLAG_HLINKED on preserve_hard_links in recv_file_entry Andrew Tridgell 2026-06-13 09:22:47 +02:00
• 66b2f31340 recv_files: refuse transfer-phase ndx that targets a cleared flist entry Andrew Tridgell 2026-06-12 23:37:53 +02:00
• 4d1044156b flist: refuse sub-flist for a cleared dir_flist slot Andrew Tridgell 2026-06-12 23:30:35 +02:00
• f30368d2f8 hlink: reject undeclared cross-flist gnum instead of assert() Andrew Tridgell 2026-06-12 23:18:22 +02:00
• 3fbee7e407 lib/pool_alloc: fence chunks with an ASan redzone to catch pool underflows Andrew Tridgell 2026-06-15 09:20:33 +10:00
• 2f8530e2cc wildtest: don't read past the buffer when scanning a test line Andrew Tridgell 2026-06-14 08:55:37 +10:00
• 8238e4ff25 log: copy forwarded message by length in rwrite(), not strlcpy() Andrew Tridgell 2026-06-14 08:55:37 +10:00
• a4dd6fad56 generator: don't read an unstat'd sx.st when creating a device/special Andrew Tridgell 2026-06-14 08:55:37 +10:00
• 2a85b22f62 rsync: stat through the held dir fd in set_file_attrs Andrew Tridgell 2026-06-10 19:33:43 +10:00
• 474897ad37 acls: route race-safe ACL ops through libacl *_at when available Andrew Tridgell 2026-06-11 15:40:08 +10:00
• 26cd6f4c7b lib/acl: close the pre-6.13 ACL parent-symlink race via /proc/self/fd Andrew Tridgell 2026-06-11 16:57:56 +10:00
• ef8f8dd8ef testsuite: drop 3.5.0-only acls-unpinnable test (carried by stable-testsuite) Andrew Tridgell 2026-06-13 19:11:50 +10:00
• 4f5d87171b acls: keep --acls functional where the OS lacks a race-safe ACL primitive Andrew Tridgell 2026-06-10 21:07:27 +10:00
• 0733648805 xattrs: route copy_xattrs through a held fd, not lsetxattr-by-path Andrew Tridgell 2026-06-13 08:05:21 +10:00
• 2d51afe38a rsync/acls/xattrs: apply received xattrs and ACLs through the held fd Andrew Tridgell 2026-06-02 18:08:35 +10:00
• 1ef09ab4cb lib/acl.c: POSIX ACL get/set via fd/at xattr syscalls + unit test Andrew Tridgell 2026-06-02 18:08:35 +10:00
• e780a75198 token: allow uncompressed literal runs larger than CHUNK_SIZE Andrew Tridgell 2026-06-13 18:49:13 +10:00
• 152d8df2df generator: route copy_altdest_file failure cleanup through do_unlink_at() Andrew Tridgell 2026-06-13 07:59:16 +10:00
• 48e7b6d11e generator: confine the alt-dest basis stat for an inner-module chroot Andrew Tridgell 2026-06-12 19:31:41 +10:00
• 1c48f22580 rrsync: backport the full restricted-dir hardening Andrew Tridgell 2026-06-12 19:19:26 +10:00
• 0e0803f859 rrsync: deny copy-unsafe-links in restricted dirs; flock fallback Andrew Tridgell 2026-06-12 18:46:44 +10:00
• 055d0c3a06 rsync-ssl: validate helper hostnames and require a CA for stunnel mode Andrew Tridgell 2026-06-12 18:46:44 +10:00
• f490ad6215 daemon: add an "auth digest" floor to refuse weak negotiated auth digests Andrew Tridgell 2026-06-14 09:12:42 +10:00
• e9b22cd404 daemon: bound argument lists + proxy-protocol peer/length hardening Andrew Tridgell 2026-06-12 18:46:44 +10:00
• 62bf55fcb7 log/batch: refuse planted symlinks at --log-file and --write/read-batch Andrew Tridgell 2026-06-12 18:36:50 +10:00
• 16bf029373 util1: confine the non-daemon receiver's destination chdir (cross-uid) Andrew Tridgell 2026-06-12 18:35:52 +10:00
• 150365cba9 daemon: secure inner chroot module paths Andrew Tridgell 2026-06-12 18:32:57 +10:00
• 9bfa07e3fd exclude: refuse planted symlinks at filter merge / *-from paths Andrew Tridgell 2026-06-12 18:30:34 +10:00
• b0ed3bc718 syscall: resolve the daemon's served-module anchor via the pinned module_dirfd Andrew Tridgell 2026-06-12 18:29:19 +10:00
• f294157591 daemon/authenticate: open operator-supplied paths refusing planted symlinks Andrew Tridgell 2026-06-12 18:27:52 +10:00
• a7c49e93e7 util1: safe_open_no_attacker_symlinks() + confine daemon module-root chdir Andrew Tridgell 2026-06-12 18:27:52 +10:00
• c86d05e3c2 sender: read symlink targets through scan dirfds Andrew Tridgell 2026-06-15 14:13:56 +10:00
• 2c55da28d9 wildtest: don't read past the buffer when scanning a test line Andrew Tridgell 2026-06-14 08:55:37 +10:00
• 6d2be4a328 log: copy forwarded message by length in rwrite(), not strlcpy() Andrew Tridgell 2026-06-14 08:55:37 +10:00
• eb4f63970b generator: don't read an unstat'd sx.st when creating a device/special Andrew Tridgell 2026-06-14 08:55:37 +10:00
• 0a4e480202 rsync: stat through the held dir fd in set_file_attrs Andrew Tridgell 2026-06-10 19:33:43 +10:00
• 893d3f612e acls: route race-safe ACL ops through libacl *_at when available Andrew Tridgell 2026-06-11 15:40:08 +10:00
• 8fc908ebaf lib/acl: close the pre-6.13 ACL parent-symlink race via /proc/self/fd Andrew Tridgell 2026-06-11 16:57:56 +10:00
• 144e7902d5 acls: keep --acls functional where the OS lacks a race-safe ACL primitive Andrew Tridgell 2026-06-10 21:07:27 +10:00
• a21e0f7660 xattrs: route copy_xattrs through a held fd, not lsetxattr-by-path Andrew Tridgell 2026-06-13 08:05:21 +10:00
• 26783f76fe rsync/acls/xattrs: apply received xattrs and ACLs through the held fd Andrew Tridgell 2026-06-02 18:08:35 +10:00
• d7f929a30e lib/acl.c: POSIX ACL get/set via fd/at xattr syscalls + unit test Andrew Tridgell 2026-06-02 18:08:35 +10:00
• 8bfa8888f1 token: allow uncompressed literal runs larger than CHUNK_SIZE Andrew Tridgell 2026-06-13 18:49:13 +10:00
• 4a83db49e1 generator: route copy_altdest_file failure cleanup through do_unlink_at() Andrew Tridgell 2026-06-13 07:59:16 +10:00
• 5ed0ab3ff4 generator: confine the alt-dest basis stat for an inner-module chroot Andrew Tridgell 2026-06-12 19:31:41 +10:00
• ca9f33f231 rrsync: backport the full restricted-dir hardening Andrew Tridgell 2026-06-12 19:19:26 +10:00
• 5db4667b0d rrsync: deny copy-unsafe-links in restricted dirs; flock fallback Andrew Tridgell 2026-06-12 18:46:44 +10:00
• 42eb7f925e rsync-ssl: validate helper hostnames and require a CA for stunnel mode Andrew Tridgell 2026-06-12 18:46:44 +10:00
• 846887d5c2 daemon: add an "auth digest" floor to refuse weak negotiated auth digests Andrew Tridgell 2026-06-14 09:11:41 +10:00
• 6e00a3b867 daemon: bound argument lists + proxy-protocol peer/length hardening Andrew Tridgell 2026-06-12 18:46:44 +10:00
• c02380f7d3 log/batch: refuse planted symlinks at --log-file and --write/read-batch Andrew Tridgell 2026-06-12 18:36:50 +10:00
• ad49840f8a util1: confine the non-daemon receiver's destination chdir (cross-uid) Andrew Tridgell 2026-06-12 18:35:52 +10:00
• 8639f647aa daemon: secure inner chroot module paths Andrew Tridgell 2026-06-12 18:32:57 +10:00
• e624db85f6 exclude: refuse planted symlinks at filter merge / *-from paths Andrew Tridgell 2026-06-12 18:30:34 +10:00
• 535a562ccc syscall: resolve the daemon's served-module anchor via the pinned module_dirfd Andrew Tridgell 2026-06-12 18:29:19 +10:00
• b33571a1df daemon/authenticate: open operator-supplied paths refusing planted symlinks Andrew Tridgell 2026-06-12 18:27:52 +10:00
• 9e12cabd8b util1: safe_open_no_attacker_symlinks() + confine daemon module-root chdir Andrew Tridgell 2026-06-12 18:27:52 +10:00
• 45dd14950a sender: read symlink targets through scan dirfds Andrew Tridgell 2026-06-15 14:13:56 +10:00
• fe93ffcd65 fix funding github username Andrew Tridgell 2026-06-15 13:58:46 +10:00
• a27095f0e1 Create FUNDING.yml Andrew Tridgell 2026-06-15 13:53:04 +10:00
• 9ca6960d39 flist/clientserver: confine the directory-scan enumeration Andrew Tridgell 2026-06-12 17:25:07 +10:00
• 3702501139 sender: confine the non-daemon content open against a parent-symlink race Andrew Tridgell 2026-06-12 17:20:12 +10:00
• 49e3dcb10c build: add t_rename_secure and t_symlink_secure check helpers Andrew Tridgell 2026-06-12 17:17:55 +10:00
• 808daef3e9 syscall: close the chmod leaf race with a held-fd fchmod Andrew Tridgell 2026-06-15 11:26:34 +10:00
• 467cce86c6 syscall: hold an ancestor-dirfd stack as the held-directory cache Andrew Tridgell 2026-06-10 19:33:43 +10:00
• 5aa125d472 flist/clientserver: confine the directory-scan enumeration Andrew Tridgell 2026-06-12 17:25:07 +10:00
• a064a92f82 sender: confine the non-daemon content open against a parent-symlink race Andrew Tridgell 2026-06-12 17:20:12 +10:00
• 0b7ee36157 build: add t_rename_secure and t_symlink_secure check helpers Andrew Tridgell 2026-06-12 17:17:55 +10:00
• 65d452bb45 syscall: close the chmod leaf race with a held-fd fchmod Andrew Tridgell 2026-06-15 11:26:34 +10:00
• 9e0e40b9b9 syscall: hold an ancestor-dirfd stack as the held-directory cache Andrew Tridgell 2026-06-10 19:33:43 +10:00