Commits

Breadcrumbs

History for

onrefs/heads/patch-1

User selector

All users

All time

Commit history

Commits on Jul 9, 2026

• iked: Use timingsafe_memcmp(3) in ikev2_msg_decrypt()

  Show description for adf68d4
  

  hshoexer

  authored and

  tobhe

  committed
  adf68d4

  Copy full SHA for adf68d4

• iked: Use timingsafe_memcmp(3) in dsa_verify_final()

  Show description for 5297709
  

  hshoexer

  authored and

  tobhe

  committed
  5297709

  Copy full SHA for 5297709

• iked: Reject all-zero curve25519 shared secrets

  Show description for 1aa237a
  

  hshoexer

  authored and

  tobhe

  committed
  1aa237a

  Copy full SHA for 1aa237a

• iked: Limit sa_eapmsk length

  Show description for 9bf9b0f
  

  hshoexer

  authored and

  tobhe

  committed
  9bf9b0f

  Copy full SHA for 9bf9b0f

• iked: Clear csa_rekey on error

  Show description for 36ee50e
  

  hshoexer

  authored and

  tobhe

  committed
  36ee50e

  Copy full SHA for 36ee50e

• iked: Fix leak of new SA on rekey error

  Show description for 63136bc
  

  hshoexer

  authored and

  tobhe

  committed
  63136bc

  Copy full SHA for 63136bc

• iked: enforce unique IKE spi in rekeying

  Show description for a7f10b7
  

  hshoexer

  authored and

  tobhe

  committed
  a7f10b7

  Copy full SHA for a7f10b7

• iked: Avoid stack exhaustion by unbounded recursion

  Show description for 2c2c1a2
  

  hshoexer

  authored and

  tobhe

  committed
  2c2c1a2

  Copy full SHA for 2c2c1a2

• Avoid infinite loop when parsing PFKEY replies

  Show description for 672a660
  

  hshoexer

  authored and

  tobhe

  committed
  672a660

  Copy full SHA for 672a660

• iked: Avoid NULL-deref in ocsp_connect_finish()

  Show description for d1e4da4
  

  hshoexer

  authored and

  tobhe

  committed
  d1e4da4

  Copy full SHA for d1e4da4

• check address size; from markus via millert

  

  deraadt

  authored and

  tobhe

  committed
  64a0aa8

  Copy full SHA for 64a0aa8

• If we receive a response it must have the exact same msgid as the last

  Show description for 979a34b
  tobhe

  committed
  979a34b

  Copy full SHA for 979a34b

• iked only ever handles one exchange at a time so we can drop the

  Show description for 335966d
  tobhe

  committed
  335966d

  Copy full SHA for 335966d

• Add ikev2_validate_ef() to validate fragment payload header size field

  Show description for 190f6d3
  tobhe

  committed
  190f6d3

  Copy full SHA for 190f6d3

• Add SA state check for CREATE_CHILD_SA exchange, similar to what we do

  Show description for 9cee102
  tobhe

  committed
  9cee102

  Copy full SHA for 9cee102

• Fix leak of e = ibuf_static() in error case

  Show description for cda5736
  tobhe

  committed
  cda5736

  Copy full SHA for cda5736

• Slightly iprove a confusing wording in the parse.y manuals:

  Show description for dceec41
  

  ischwarze

  authored and

  tobhe

  committed
  dceec41

  Copy full SHA for dceec41

• avoid uninitialised variable use

  Show description for 4f233e9
  

  jonathangray

  authored and

  tobhe

  committed
  4f233e9

  Copy full SHA for 4f233e9

• Load multiple certificates as a certificate chain from a file. It

  Show description for ec5090b
  

  yasuoka

  authored and

  tobhe

  committed
  ec5090b

  Copy full SHA for ec5090b

• Correctly free X509 stacks when dealing with cert bundles.

  Show description for ebccee3
  

  jmatthew

  authored and

  tobhe

  committed
  ebccee3

  Copy full SHA for ebccee3

• Typo: udpecap -> udpencap.

  Show description for 8eaff8b
  

  pascal

  authored and

  tobhe

  committed
  8eaff8b

  Copy full SHA for 8eaff8b

• Fix some leaks.

  Show description for 3f1c129
  

  yasuoka

  authored and

  tobhe

  committed
  3f1c129

  Copy full SHA for 3f1c129

• Minimal fix to make internal hyperlinking work for these sections:

  Show description for c9ebf5a
  

  ischwarze

  authored and

  tobhe

  committed
  c9ebf5a

  Copy full SHA for c9ebf5a

• In the manual pages for configuration files based on parse.y, describe

  Show description for 4baf376
  

  ischwarze

  authored and

  tobhe

  committed
  4baf376

  Copy full SHA for 4baf376

• mop up P-192/Group 25 remnants

  Show description for 8bd74e7
  

  botovq

  authored and

  tobhe

  committed
  8bd74e7

  Copy full SHA for 8bd74e7

• Fix leak of peerid.id_buf

  Show description for 13e07c3
  tobhe

  committed
  13e07c3

  Copy full SHA for 13e07c3

Commits on Aug 27, 2025

• proc_open: fix socketpair() on macos

  Show description for 4a71216
  

  LorenzISR

  authored and

  tobhe

  committed
  4a71216

  Copy full SHA for 4a71216

Commits on Apr 12, 2025

• vroute.c: include sys/socket.h

  

  barracuda156

  authored and

  tobhe

  committed
  8117fd9

  Copy full SHA for 8117fd9

Commits on Apr 9, 2025

• Fix a double-free in iked(8) and isakmpd(8) in ecdh mode.

  Show description for f4cf5d1
  

  bluhm

  authored and

  tobhe

  committed
  f4cf5d1

  Copy full SHA for f4cf5d1

Commits on Apr 8, 2025

• Drop include of openssl/engine.h.

  Show description for 4259b54
  tobhe

  committed
  4259b54

  Copy full SHA for 4259b54

• add a "natt" option that forces negotiation of nat-t (and udpencap).

  Show description for 01c64db
  

  dlg

  authored and

  tobhe

  committed
  01c64db

  Copy full SHA for 01c64db

• Move remote address update after ikev2_pld_parse() to make sure

  Show description for baf0c8e
  tobhe

  committed
  baf0c8e

  Copy full SHA for baf0c8e

• Print "request" instead of "config" if dumping config when "request XX"

  Show description for 5815730
  

  sthen

  authored and

  tobhe

  committed
  5815730

  Copy full SHA for 5815730

• Skip checking for root if we are only doing a config test.

  Show description for e4362c8
  

  sthen

  authored and

  tobhe

  committed
  e4362c8

  Copy full SHA for e4362c8

• s/ibuf_add_buf/ibuf_add_ibuf/

  Show description for dee6062
  

  cjeker

  authored and

  tobhe

  committed
  dee6062

  Copy full SHA for dee6062