- Syslog-ng-commit - lists.balabit.hu

syslog-ng--mainline: Forward port: Fixed possible DoS when a 0 sized packet is received via UDP
by bazsi＠balabit.hu 25 Oct '06

25 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.1--patch-6 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Wed Oct 25 10:12:31 CEST 2006 Standard-date: 2006-10-25 08:12:31 GMT Modified-files: ChangeLog src/afsocket.c src/logreader.c New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-72 devel(a)balabit.hu--other-1/syslog-ng--mainline--2.1--patch-6 Summary: Forward port: Fixed possible DoS when a 0 sized packet is received via UDP Keywords: * src/logreader.c (log_reader_fetch_log): don't take 0 sized packets as EOF for packet based transports like UDP * src/afsocket.c (afsocket_sc_notify): don't close the input connection on read errors for non-stream based transports Diff stats: ChangeLog | 21 +++++++++++++++++++++ src/afsocket.c | 3 ++- src/logreader.c | 2 +- 3 files changed, 24 insertions(+), 2 deletions(-)

1 0

syslog-ng--mainline: forward port: fixed facility filter evaluation problem on platforms with unsigned chars (powerpc)
by bazsi＠balabit.hu 25 Oct '06

25 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.1--patch-5 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Wed Oct 25 10:11:24 CEST 2006 Standard-date: 2006-10-25 08:11:24 GMT Modified-files: ChangeLog src/filter.c New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-71 devel(a)balabit.hu--other-1/syslog-ng--mainline--2.1--patch-5 Summary: forward port: fixed facility filter evaluation problem on platforms with unsigned chars (powerpc) Keywords: * src/filter.c (filter_facility_eval): Fixed filter evaluation on platforms which have unsigned character type by default (powerpc) Diff stats: ChangeLog | 17 +++++++++++++++++ src/filter.c | 2 +- 2 files changed, 18 insertions(+), 1 deletion(-)

1 0

syslog-ng--mainline: fixed up changelog generation
by bazsi＠balabit.hu 25 Oct '06

25 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.1--patch-4 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Wed Oct 25 10:09:33 CEST 2006 Standard-date: 2006-10-25 08:09:33 GMT New-files: .arch-ids/ChangeLog.2.id .arch-ids/ChangeLog.id ChangeLog ChangeLog.2 Removed-files: .arch-ids/ChangeLog.id ChangeLog New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.1--patch-4 Summary: fixed up changelog generation Keywords: Diff stats: 0 files changed

1 0

syslog-ng--mainline: added clarification of the output format of program()
by bazsi＠balabit.hu 25 Oct '06

25 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.1--patch-3 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Wed Oct 25 10:02:26 CEST 2006 Standard-date: 2006-10-25 08:02:26 GMT Modified-files: ChangeLog doc/reference/syslog-ng.xml New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-70 devel(a)balabit.hu--other-1/syslog-ng--mainline--2.1--patch-3 Summary: added clarification of the output format of program() Keywords: Diff stats: ChangeLog | 14 ++++++++++++++ doc/reference/syslog-ng.xml | 4 +++- 2 files changed, 17 insertions(+), 1 deletion(-)

1 0

syslog-ng--mainline: added TLS support for incoming TCP connections
by bazsi＠balabit.hu 25 Oct '06

25 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.1--patch-2 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Wed Oct 25 09:59:41 CEST 2006 Standard-date: 2006-10-25 07:59:41 GMT New-files: src/.arch-ids/tlsread.c.id src/.arch-ids/tlsread.h.id src/tlsread.c src/tlsread.h Modified-files: src/Makefile.am src/afsocket.c src/cfg-grammar.y src/cfg-lex.l src/fdread.c src/fdread.h src/fdwrite.c src/fdwrite.h src/tlscontext.c src/tlswrite.c New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.1--patch-2 Summary: added TLS support for incoming TCP connections Keywords: * src/afsocket.c (afsocket_sc_init): use TLSRead instance to fetch messages if self->tls_context is set, (afsocket_sd_set_tls_context): new function, called by the config parser to set a TLS context, * src/cfg-grammar.y (source_afinet_tcp_option): removed never-implemented crypt/auth/mac keywords, added TLS specific parsing code * src/cfg-lex.l: removed keywords for required/allow/deny * src/fdread.c (fd_read_free): use a function pointer to actually free the FDRead instance, moved the bulk of fd_read_free to a static function, (fd_read_free_method): the bulk of the task of freeing FDRead is moved here * src/fdwrite.c (fd_write_free_method): removed static qualifier * src/tlscontext.c (tls_context_setup_session): added CA verification setup code, initial handshake is now performed as a non-blocking operation during normal read/write, thus we need to call set_connect_state() and/or set_accept_state() * src/tlswrite.c (tls_write_write_method): removed the call to SSL_connect(), nonblocking handshake is performed instead, making the code much simpler, (tls_write_new): initialize cond to (G_IO_IN | G_IO_OUT) as the SSL handshake will define the exact I/O order, and it is possible that the client reads first (which is not the case, but let's leave that possibility delegated to libssl) * src/tlsread.c: new file, implements SSL wrapped reading Diff stats: Makefile.am | 2 +- afsocket.c | 12 +++++++++++- cfg-grammar.y | 18 +++++------------- cfg-lex.l | 3 --- fdread.c | 9 ++++++++- fdread.h | 11 ++++++++--- fdwrite.c | 5 +---- fdwrite.h | 1 + tlscontext.c | 38 +++++++++++++++++++++++++++++++++++++- tlswrite.c | 33 ++++++++------------------------- 10 files changed, 80 insertions(+), 52 deletions(-)

1 0

syslog-ng--mainline: updated VERSION number
by bazsi＠balabit.hu 24 Oct '06

24 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.0--patch-86 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Tue Oct 24 13:37:43 CEST 2006 Standard-date: 2006-10-24 11:37:43 GMT Modified-files: ChangeLog VERSION New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-86 Summary: updated VERSION number Keywords: Diff stats: ChangeLog | 14 ++++++++++++++ VERSION | 2 +- 2 files changed, 15 insertions(+), 1 deletion(-)

1 0

syslog-ng--mainline: preparations for 2.0rc4
by bazsi＠balabit.hu 24 Oct '06

24 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.0--patch-85 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Tue Oct 24 13:37:16 CEST 2006 Standard-date: 2006-10-24 11:37:16 GMT Modified-files: ChangeLog NEWS New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-85 Summary: preparations for 2.0rc4 Keywords: Diff stats: ChangeLog | 14 ++++++++++++++ NEWS | 8 ++++++++ 2 files changed, 22 insertions(+)

1 0

syslog-ng--mainline: fixed possible NULL deref on destination connection broken, fixed EOF detection
by bazsi＠balabit.hu 21 Oct '06

21 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.0--patch-84 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Sat Oct 21 22:41:41 CEST 2006 Standard-date: 2006-10-21 20:41:41 GMT Modified-files: ChangeLog src/logwriter.c New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-84 Summary: fixed possible NULL deref on destination connection broken, fixed EOF detection Keywords: 2006-10-21 Balazs Scheidler <bazsi(a)balabit.hu> * src/logwriter.c (log_writer_fd_prepare): when EOF detection is enabled specify G_IO_IN and G_IO_HUP in addition to normal flags, (log_writer_fd_dispatch): input on the destination fd is taken as EOF, (log_writer_broken): _deinit is moved after the call to notify, should not matter at all however the reference counting depends on the fact that log_pipe_notify() will not be called after _deinit finishes, in this specific case it would not really matter, (log_writer_deinit): remove unref of self->control, (log_writer_new): self->control is a borrowed reference, don't increase refcount Diff stats: ChangeLog | 26 ++++++++++++++++++++++++++ src/logwriter.c | 12 +++++------- 2 files changed, 31 insertions(+), 7 deletions(-)

1 0

syslog-ng--mainline: added syslog-multicast client to contrib
by bazsi＠balabit.hu 06 Oct '06

06 Oct '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.0--patch-83 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Fri Oct 6 13:49:45 CEST 2006 Standard-date: 2006-10-06 11:49:45 GMT New-files: contrib/.arch-ids/syslog-mc.id contrib/syslog-mc Modified-files: ChangeLog contrib/README New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-83 Summary: added syslog-multicast client to contrib Keywords: Diff stats: ChangeLog | 15 +++++++++++++++ contrib/README | 3 ++- 2 files changed, 17 insertions(+), 1 deletion(-)

1 0

syslog-ng--mainline: preparations for 2.0rc3
by bazsi＠balabit.hu 14 Sep '06

14 Sep '06

Link: <http://intra.balabit/cgi-bin/viewarch.cgi/devel@balabit.hu--other-1/syslog-…> Revision: syslog-ng--mainline--2.0--patch-82 Archive: devel(a)balabit.hu--other-1 Creator: Balazs Scheidler <bazsi(a)balabit.hu> Date: Thu Sep 14 14:35:49 CEST 2006 Standard-date: 2006-09-14 12:35:49 GMT Modified-files: ChangeLog NEWS VERSION New-patches: devel(a)balabit.hu--other-1/syslog-ng--mainline--2.0--patch-82 Summary: preparations for 2.0rc3 Keywords: Diff stats: ChangeLog | 14 ++++++++++++++ NEWS | 8 ++++++++ VERSION | 2 +- 3 files changed, 23 insertions(+), 1 deletion(-)

1 0