Commit graph

32 commits

Author SHA1 Message Date
Roger A. Light
9f7b23ca72 Fix oss-fuzz 67175, 67180, 67191
Embedded 0 characters in a file would prevent the loading of that file.

This could not happen apart from corruption of the file, or by
deliberate manipulation by the admin. Minimal impact.
2024-03-04 14:24:55 +00:00
Roger A. Light
34e07184e0 Fix oss-fuzz 67167.
Leak on startup and reload only, assuming a corrupt password file
provided by the admin. Minimal impact.
2024-03-02 19:40:45 +00:00
Roger A. Light
6eaf6e594f Fix oss-fuzz 58270
Memory leak regression in unreleased code.
2024-02-29 10:27:55 +00:00
Roger A. Light
dcd5b803f2 Merge branch 'fixes' into develop 2024-02-21 23:30:33 +00:00
Roger A. Light
05e42f7dbb Default to using argon2 for passwords 2024-02-11 22:08:16 +00:00
Roger A. Light
69ee7da106 Simplify base64_mosq.c 2024-01-31 16:58:55 +00:00
Roger A. Light
d17a88d916 Refactor headers for easier discovery. 2023-12-23 12:59:58 +00:00
Roger A. Light
752a302295 Increase pbkdf2 iterations to recommended 2023-11-20 23:08:16 +00:00
Roger A. Light
837c272c29 Add argon2 password hash support 2023-11-20 22:58:42 +00:00
Roger A. Light
b6710f9364 Refactor password code 2023-11-20 22:58:42 +00:00
Roger A. Light
c08fed19eb Use openssl memcmp where available
Otherwise, ensure compiler will not optimise the array access, by using volatile
2023-11-17 10:26:54 +00:00
Roger A. Light
fc4aaee0bf Add C++ guard 2023-09-20 21:26:54 +01:00
Roger A. Light
acc8fb4799 No point checking for a link once open. 2023-09-20 10:53:18 +01:00
Roger A. Light
fd4f4bc31c Don't allow files to be symbolic links 2023-09-10 22:28:25 +01:00
Roger A. Light
e656e694ed Merge branch 'master' into develop 2023-09-09 15:20:40 +01:00
Roger A. Light
747fcacd67 Make args const where possible, fix persist-sqlite build. 2023-04-19 22:54:53 +01:00
Roger A. Light
56462c1229 Refactor for more consistent json helper use. 2023-04-19 17:12:20 +01:00
Roger A. Light
2940d9cc4c Move control common helper functions to broker. 2023-04-02 00:27:15 +01:00
Roger A. Light
53dc3006a2 Make cJSON a hard dependency. 2023-04-01 23:35:03 +01:00
Roger A. Light
910b8e2c1d Remove effectively duplicate parameter. 2023-03-23 12:10:00 +00:00
Roger A. Light
7c8af215ad Fix building with WITH_CJSON=no 2023-01-31 11:17:53 +00:00
Roger A. Light
4199e7b2d3 Move control functions to common, and use in the broker. 2022-12-31 14:34:26 +00:00
Norbert Heusser
ba5f8eb448 Cleanup of include guard defines
Signed-off-by: Norbert Heusser <norbert.heusser@cedalo.com>
2022-12-21 15:35:38 +00:00
Roger A. Light
67d0792fd6 Remove duplicate code. 2022-11-15 15:50:25 +00:00
Roger A. Light
6fd9c200ac Fix coverity scan 1499796 2022-10-16 08:41:30 +01:00
Roger A. Light
2a95ec73ba Fix Coverity Scan 1491166. 2022-10-16 07:59:54 +01:00
Roger A. Light
e082e54fe2 Fix Coverity Scan 1490915. 2022-08-01 22:50:01 +01:00
Roger A. Light
965b506e0a Tidy 2022-08-01 22:47:46 +01:00
Roger A. Light
1ccde47e8e Windows build fix. 2022-07-21 20:21:25 +01:00
Norbert Heusser
621d74fd6a Created new helper function mosquitto_write_file in common/misc_mosq.h to consolidate
saving config files in failsafe manner

Signed-off-by: Norbert Heusser <norbert.heusser@cedalo.com>
2022-07-19 17:22:19 +00:00
Kai Buschulte
a3125934dd Fix macOS compile issues
Signed-off-by: Kai Buschulte <kai.buschulte@cedalo.com>
2022-05-11 07:01:22 +00:00
Roger A. Light
ffb7661d86 Move shared code to common directory
This is currently limited to "utility" type functions and does not include code common to the library and broker that are protocol related.
2022-02-09 16:26:10 +00:00