ocserv

mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-08-09 09:51:49 +08:00

Files

T

Nikos Mavrogiannopoulos 5a9cddf606 main: validate AUTH_COOKIE_REQ cookie length before use

main read cookie.data[0] (to select sec_mod_instance_index) before
validating the cookie's length. A worker sending an empty cookie
unpacks with cookie.data == NULL (protobuf-c "required bytes"
semantics), so the read crashed the root main process, tearing down
every connected client.

Validate cookie.data/len immediately after unpacking, before the
first byte is read. handle_auth_cookie_req()'s own later check
remains as defense-in-depth.

Adds REQ-IPC-018.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

2026-07-28 08:00:06 +02:00

requirements

main: validate AUTH_COOKIE_REQ cookie length before use

2026-07-28 08:00:06 +02:00

scripts

Added the STATS_DURATION script environment variable.

2014-05-04 11:20:32 +02:00

systemd

Cleanup of the logging subsystem; allow logging to stderr only

2023-12-15 13:04:40 +01:00

DCO.txt

Added contribution guide and require DCO