 Nick Mathewson
|
5aaac938a9
Have sandbox string protection include multi-valued parmeters.
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
f268101a61
Clean up sandbox structures a bit
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
6807b76a5e
Add missing rename function for non-linux platforms
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
71eaebd971
Drop 'fr' parameter from sandbox code.
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
cbfb8e703e
Add 'rename' to the sandboxed syscalls
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
3802e32c7d
Only intern one copy of each magic string for the sandbox
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
ae9d6d73f5
Fix some initial sandbox issues.
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
cc9e86db61
Log a backtrace when the sandbox finds a failure
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
196895ed7e
Make the sandbox code allow the writev() syscall.
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
119896cd43
Fix some leaks/missed checks in the unit tests
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
25f0eb4512
Add a sandbox rule to allow IP_TRANSPARENT
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
9be105f94b
whitespace fixes
|
%!s(int64=10) %!d(string=hai) anos |
|
Nick Mathewson
|
682c2252a5
Fix some seccomp2 issues
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
fbc20294aa
Merge branch 'backtrace_squashed'
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
bd8ad674b9
Add a sighandler-safe logging mechanism
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
1825674bd3
Fix a memory leak on getaddrinfo in sandbox. Found by coverity
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
4ea9fbcdb1
Clean up malloc issues in sandbox.c
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
e0b2cd061b
Merge remote-tracking branch 'ctoader/gsoc-cap-stage2'
|
%!s(int64=11) %!d(string=hai) anos |
 Cristian Toader
|
7cf1b9cc33
fixed compilation bug on i386 due to previous fix
|
%!s(int64=11) %!d(string=hai) anos |
|
Cristian Toader
|
d2836c8780
bug fix: syscalls send and recv not supported for x86_64 with libseccomp 1.0.1
|
%!s(int64=11) %!d(string=hai) anos |
|
Cristian Toader
|
0a3d1685ae
remove debugging code
|
%!s(int64=11) %!d(string=hai) anos |
|
Cristian Toader
|
4702cdc99d
added extra buffer and limit to mprotect not to exceed the length of that buffer
|
%!s(int64=11) %!d(string=hai) anos |
|
Cristian Toader
|
79f94e236b
added filter protection for string parameter memory
|
%!s(int64=11) %!d(string=hai) anos |
|
Cristian Toader
|
8e003b1c69
fixed socket syscall bug
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
d91c776f61
Fix check-spaces
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
49f9c4924e
Fix compilation on OSX
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
e9ec0cb550
Do not try to add non-existent syscalls.
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
a6ada1a50c
Fix a warning related to SCMP_CMP definition in header.
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
cc35d8be84
Fix most of the --enable-gcc-warnings warnings in the sandbox code
|
%!s(int64=11) %!d(string=hai) anos |
|
Nick Mathewson
|
42e6ab0e14
Remove a usage of free()
|
%!s(int64=11) %!d(string=hai) anos |
