4702cdc99d
added extra buffer and limit to mprotect not to exceed the length of that buffer
2013-09-12 13:43:06 +03:00
6a11b6f97d
Fix osx compilation again, hopefully better this time.
2013-09-11 13:53:33 -04:00
79f94e236b
added filter protection for string parameter memory
2013-09-10 14:35:11 +03:00
8e003b1c69
fixed socket syscall bug
2013-09-10 00:42:36 +03:00
3802cae959
fixed compilation error on i386 linux by moving sandbox_cfg_t definition
2013-09-10 00:04:43 +03:00
d91c776f61
Fix check-spaces
2013-09-09 16:00:40 -04:00
49f9c4924e
Fix compilation on OSX
2013-09-09 15:59:41 -04:00
e9ec0cb550
Do not try to add non-existent syscalls.
2013-09-09 15:37:45 -04:00
4e00625bbe
Build correctly with older libevents
2013-09-09 15:29:19 -04:00
05f8429a28
Split libevent AC_CHECK_FUNCS call into multiple lines
2013-09-09 15:18:54 -04:00
a6ada1a50c
Fix a warning related to SCMP_CMP definition in header.
...
SCMP_CMP(a,b,c) leaves the fourth field of the structure undefined,
giving a missing-initializer error. All of our uses are
three-argument, so I'm overriding the default.
2013-09-09 15:16:30 -04:00
cc35d8be84
Fix most of the --enable-gcc-warnings warnings in the sandbox code
2013-09-09 15:14:50 -04:00
42e6ab0e14
Remove a usage of free()
2013-09-09 14:58:15 -04:00
00fd0cc5f9
Basic compilation fixes.
2013-09-09 14:55:47 -04:00
340cca524f
added missing documentation for sandbox functions
2013-09-06 21:41:45 +03:00
6a22b29641
passing hints as a const pointer to sandbox_getaddrinfo(), also one tor_free macro fails to compile..
2013-09-06 12:39:56 +03:00
839ff0063d
replaced strdup with tor_strdup
2013-09-06 12:30:01 +03:00
2a6c34750d
replaced malloc/free with tor_malloc/tor_free
2013-09-06 12:29:15 +03:00
42f5737c81
switched string lengths from int to size_t in prot_strings()
2013-09-06 12:26:50 +03:00
55d8b8e578
fixed bug where sandbox_getaddrinfo() would fail when -Sandbox is 0
2013-09-03 16:37:12 +03:00
b4b0eddd29
switched to a more generic way of handling the sandbox configuration
2013-09-02 13:54:43 +03:00
fe6e2733ab
added contingency message to test for sandbox_getaddrinfo
2013-09-02 12:16:02 +03:00
c584537a03
make check-spaces fix
2013-09-02 11:45:09 +03:00
1ef0b2e1a3
changed how sb getaddrinfo works such that it supports storing multiple results
2013-09-02 11:44:04 +03:00
3e803a1f18
make check-spaces fix
2013-08-29 16:53:12 +03:00
1118bd9910
switched from multiple mmap to one
2013-08-29 16:51:05 +03:00
f93ba9a2ef
documentation update for _array functions
2013-08-29 15:44:01 +03:00
d5f43b5254
_array filter functions now rely on final NULL parameter
2013-08-29 15:42:30 +03:00
b1f7105506
supporting /dev/urandom instead of /dev/random
2013-08-29 15:22:14 +03:00
ce04d2a622
replaced boolean char with int
2013-08-29 15:19:49 +03:00
8e2b9d2844
small fixes in documentation and sandbox_getaddrinfo()
2013-08-29 12:41:17 +03:00
6cae5d706c
Added doxygen struct doc and replaced func() with funct(void)
2013-08-28 20:01:52 +03:00
8b8f87a06a
removed PARAM_LEN
2013-08-28 19:56:42 +03:00
b121ca581d
make check-spaces fix
2013-08-26 21:28:30 +03:00
148c6dc473
updated open syscall strings
2013-08-26 21:19:22 +03:00
15d420b564
fix: accept4 for 64 bit
2013-08-26 20:06:46 +03:00
b10472f92b
small open syscall modification (just in case)
2013-08-21 19:01:01 +03:00
bc19ea100c
make check-spaces fixes
2013-08-21 17:57:15 +03:00
ed4968315e
fix: sandbox_intern_string log clean up
2013-08-21 13:43:44 +03:00
8aa5517ff6
fix: flock filter update
2013-08-21 13:38:00 +03:00
71612f00ae
fixed openssl open syscall, fixed sandbox_getaddrinfo
2013-08-20 13:10:07 +03:00
36aeca0ecf
fix for getaddrinfo open syscall
2013-08-19 13:56:50 +03:00
a9910d89f1
finalised fix on libevent open string issue
2013-08-19 11:41:46 +03:00
c09b11b6d8
updated filters
2013-08-16 01:43:09 +03:00
863dd4d4b3
received feedback and fixed (partly) the socket filters
2013-08-15 00:23:51 +03:00
372e0f91fd
added comments for sandbox.h
2013-08-15 00:09:07 +03:00
e2a7b484f4
partial libevent open fix
2013-08-14 23:03:38 +03:00
8a85a48b9d
attempt to add stat64 filename filters; failed due to getaddrinfo..
2013-08-12 21:14:43 +03:00
44a4464cf6
fixed memory leak, added array filter support
2013-08-10 18:04:48 +03:00
89b39db003
updated filters to work with orport
2013-08-09 19:07:20 +03:00
Cristian Toader
Nick Mathewson