Nikos Mavrogiannopoulos 0dafa7b005 tests: add regression test for pam_auth_deinit coroutine safety ...

Add test-pam-abort, which verifies that pam_auth_deinit() correctly
resumes a suspended PAM coroutine before calling pam_end().

The test posts a username-only HTTP request to trigger SEC_AUTH_INIT,
leaving the PAM coroutine suspended in PAM_S_WAIT_FOR_PASS while the
worker exits without sending a password.  The stale pre-auth entry is
cleaned up by the sec-mod maintenance cycle (driven by the new
sec-mod-db-cleanup-time config knob, set to 3 s in the test config).

Bug detection is provided by pam_abort_test.so, a small PAM module that
registers a pam_set_data() cleanup which calls abort() if pam_end() fires
while conv->conv() has not yet returned.  Without the fix, sec-mod would
abort and the subsequent authentication check would fail.

Relates: #741

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

2026-06-06 08:12:13 +02:00

..

acct

Do not use uninitialised pam_handle_t

2026-05-17 13:16:23 +02:00

auth

pam: cleanup PAM session if user aborts during conversation

2026-06-06 08:12:13 +02:00

ccan

Add LICENSE files of bundled sotware

2026-05-23 16:16:35 +02:00

common

Build against GNU Nettle 4

2026-05-19 21:23:03 +02:00

gnulib

Modify the header file for C99 compatibility

2025-04-02 09:07:32 +02:00

inih

Replaced autoconf with meson build files

2026-03-20 20:47:27 +01:00

llhttp

Merge branch 'tmp-LICENSE' into 'master'

2026-05-30 21:36:22 +00:00

occtl

occtl: fix trailing comma in JSON array for show sessions valid/all

2026-03-22 21:17:02 +01:00

ocpasswd

Replaced autoconf with meson build files

2026-03-20 20:47:27 +01:00

pcl

Add LICENSE files of bundled sotware

2026-05-23 16:16:35 +02:00

protobuf

Add LICENSE files of bundled sotware

2026-05-23 16:16:35 +02:00

sup-config

main: remove cgroup support in favour of systemd resource controls

2026-05-23 07:09:23 +02:00

auth-unix.c

talloc_size() → talloc_array()

2026-05-11 20:13:35 +02:00

auth-unix.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

cfg.proto

tests: add regression test for pam_auth_deinit coroutine safety

2026-06-06 08:12:13 +02:00

common-config.h

pam: add 'service' sub-option to auth directive

2026-05-08 21:00:07 -04:00

common.mk

Switch from http-parser to llhttp

2024-04-28 13:37:19 +02:00

config-kkdcp.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

config-ports.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

config.c

tests: add regression test for pam_auth_deinit coroutine safety

2026-06-06 08:12:13 +02:00

ctl.proto

protobuf: use 64-bit signed integers for timestamp fields

2026-04-14 13:59:05 -04:00

defs.h

occtl: add terminate commands for session cookie invalidation

2026-03-15 17:05:29 +03:00

gettime.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

html.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

html.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

http-heads.gperf

http-heads: generate as C file to avoid issue with coverage

2026-03-20 20:47:35 +01:00

http-heads.h

http-heads: generate as C file to avoid issue with coverage

2026-03-20 20:47:35 +01:00

icmp-ping.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

icmp-ping.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

ip-lease.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

ip-lease.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

ip-util.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

ip-util.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

ipc.proto

main: remove cgroup support in favour of systemd resource controls

2026-05-23 07:09:23 +02:00

isolate.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

isolate.h

worker: add per-worker memory limit via RLIMIT_DATA

2026-05-06 13:54:40 +02:00

kkdcp.asn

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

log.c

tests: replace strcpy() with strlcpy()

2026-01-07 15:46:16 -05:00

log.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

lzs.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

lzs.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

main-auth.c

main: remove cgroup support in favour of systemd resource controls

2026-05-23 07:09:23 +02:00

main-ban.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

main-ban.h

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

main-ctl-unix.c

Fix calculation of avg_auth_time across sec-mod instances

2026-05-24 11:47:26 +02:00

main-ctl.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

main-limits.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

main-limits.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

main-log.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

main-proc.c

main: remove cgroup support in favour of systemd resource controls

2026-05-23 07:09:23 +02:00

main-sec-mod-cmd.c

main: remove cgroup support in favour of systemd resource controls

2026-05-23 07:09:23 +02:00

main-user.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

main-worker-cmd.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

main.c

config: add syslog-facility option to allow routing logs independently

2026-06-03 19:52:36 +02:00

main.h

ocserv: exit with error code on error

2026-05-31 22:32:20 +02:00

meson.build

Always use the bundled PCL library

2026-05-23 17:43:36 +02:00

namespace.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

namespace.h

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

ocserv-fw-iptables

Added ocserv-fw for nftables

2026-03-29 16:55:12 +02:00

ocserv-fw-nftables

ocserv-fw-nftables: replace ipcalc with pure-shell mask_to_prefix

2026-05-02 17:21:38 +02:00

proc-search.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

proc-search.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

route-add.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

route-add.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

script-list.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

sec-mod-acct.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

sec-mod-auth.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

sec-mod-auth.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

sec-mod-cookies.c

talloc_size() → talloc_array()

2026-05-11 20:13:35 +02:00

sec-mod-db.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

sec-mod-resume.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

sec-mod-resume.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

sec-mod-sup-config.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

sec-mod-sup-config.h

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

sec-mod.c

tests: add regression test for pam_auth_deinit coroutine safety

2026-06-06 08:12:13 +02:00

sec-mod.h

occtl: add terminate commands for session cookie invalidation

2026-03-15 17:05:29 +03:00

setproctitle.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

setproctitle.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

str.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

str.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

subconfig.c

Merge branch 'tmp-fedora44-ubuntu26.04' into 'master'

2026-05-11 20:17:30 +03:00

tlslib.c

tlslib: simplified by requiring gnutls 3.3.5

2026-05-30 22:49:07 +02:00

tlslib.h

tlslib: simplified by requiring gnutls 3.3.5

2026-05-30 22:49:07 +02:00

tun.c

worker: drain TUN in a burst loop to avoid per-packet epoll_wait()

2026-05-30 22:49:07 +02:00

tun.h

tun_write/read were made macros in linux for write and read

2026-05-30 22:49:07 +02:00

valid-hostname.c

Include <sys:socket.h> for AF_INET

2026-05-06 20:33:03 +02:00

vasprintf.c

Improved code formatting

2024-12-01 20:49:05 +01:00

vasprintf.h

Consistent include guards in header files

2023-02-23 22:04:10 +01:00

version.inc.in

regenerate autogen'ed files when making a distribution.

2013-07-23 21:39:47 +02:00

vhost.h

config: treat expose-iroutes as a normal configuration option

2026-04-22 20:29:26 +02:00

vpn.h

config: add syslog-facility option to allow routing logs independently

2026-06-03 19:52:36 +02:00

worker-auth.c

tun_write/read were made macros in linux for write and read

2026-05-30 22:49:07 +02:00

worker-bandwidth.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

worker-bandwidth.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

worker-http-handlers.c

Removed unnecessary CA and certificate handlers

2026-05-19 20:11:33 +02:00

worker-http.c

Merge branch 'tmp-fix-716' into 'master'

2026-05-21 06:34:06 +00:00

worker-kkdcp.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

worker-latency.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

worker-latency.h

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

worker-log.c

config: restructure per-vhost configuration for clarity and maintainability

2026-04-22 20:29:15 +02:00

worker-misc.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

worker-privs.c

Log messages don't need a trailing \n

2026-05-12 08:14:21 +02:00

worker-proxyproto.c

Consistency for readability

2026-05-19 23:22:37 +02:00

worker-resume.c

Updated code to follow with kernel coding style

2024-12-01 17:01:05 +01:00

worker-svc.c

/svc handler: add the owasp headers for consistency

2026-05-19 20:11:33 +02:00

worker-tun.c

tun_write/read were made macros in linux for write and read

2026-05-30 22:49:07 +02:00

worker-tun.h

tun_write/read were made macros in linux for write and read

2026-05-30 22:49:07 +02:00

worker-vpn.c

worker: detect and handle errors in socket from main

2026-05-30 22:49:07 +02:00

worker.c

config: add syslog-facility option to allow routing logs independently

2026-06-03 19:52:36 +02:00

worker.h

worker: drain TUN in a burst loop to avoid per-packet epoll_wait()

2026-05-30 22:49:07 +02:00