Bernhard Miklautz
fc6a3cf3c1
sspi/ntlm: integrate pull request comments
2015-06-22 19:23:58 +02:00
David FORT
7c3f8f33ab
Fixes for malloc / calloc + other fixes
...
This patch contains:
* checks for malloc return value + treat callers;
* modified malloc() + ZeroMemory() to calloc();
* misc fixes of micro errors seen during the code audit:
** some invalid checks in gcc.c, also there were some possible
integer overflow. This is interesting because at the end the data are parsed
and freed directly, so it's a vulnerability in some kind of dead code (at least
useless);
** fixed usage of GetComputerNameExA with just one call, when 2 were used
in misc places. According to MSDN GetComputerNameA() is supposed to return
an error when called with NULL;
** there were a bug in the command line parsing of shadow;
** in freerdp_dynamic_channel_collection_add() the size of array was multiplied
by 4 instead of 2 on resize
2015-06-22 19:21:47 +02:00
Hardening
1b366816a2
Merge pull request #2608 from oshogbo/master
...
Add check to protect memcpy(3) from using NULL pointer.
2015-05-29 10:49:42 +02:00
Mariusz Zaborski
80958751e4
Add check to protect memcpy(3) from using NULL pointer.
...
The ntlm_construct_challenge_target_info function can potentially pass NULL as
argument to the ntlm_av_pair_add function (for example DnsDomainName.Buffer).
This NULL finally lands in the CopyMemory (which is macro to the memcpy(3)
function) which can't handle NULL.
2015-05-25 08:32:48 +02:00
Konrad Witaszczyk
29d3b0bebb
QueryContextAttributes shouldn't return an error when a user or a domain
...
is empty.
2015-05-18 09:42:17 +02:00
Norbert Federa
1eff1a345e
free can handle NULL perfectly fine
2015-05-11 09:07:39 +02:00
Bernhard Miklautz
850de59b55
winpr: add checks for *alloc
...
Add missing checks if memory allocation was successful. Also adapt
caller(s) when possible.
2015-04-08 11:34:37 +02:00
Armin Novak
831b74d519
Fixed memory leak.
2014-11-16 17:07:48 +01:00
Armin Novak
9339411c9b
Fixed memory leak.
2014-11-16 15:53:39 +01:00
Armin Novak
7756cfb7a4
Fixed memory leaks.
2014-11-16 14:56:08 +01:00
Marc-André Moreau
2a5192b027
Merge branch 'master' of github.com:awakecoding/FreeRDP into egfx
...
Conflicts:
client/Windows/wf_cliprdr.h
client/Windows/wf_event.h
client/X11/xf_client.c
client/X11/xf_gdi.c
libfreerdp/gdi/gdi.c
server/Mac/mf_input.c
2014-09-17 19:09:56 -04:00
Marc-André Moreau
f0bff7e890
libwinpr-sspi: fix NTLM strict error check
2014-09-17 18:44:59 -04:00
Armin Novak
81a4081279
Decreased logging verbosity.
2014-09-16 09:37:45 +02:00
Armin Novak
6a26e33695
Fixed winpr_HexDump calls in debug mode.
2014-09-09 16:32:22 +02:00
Armin Novak
b22b897389
Reformatted changed files.
2014-09-09 16:32:22 +02:00
Armin Novak
7e3a1b3073
Now using macro to generate module specific log tag.
2014-09-09 16:32:04 +02:00
Armin Novak
28ece6bb46
Replaced stdio logging with WLog
2014-09-09 16:31:46 +02:00
Marc-André Moreau
948d137426
libwinpr-sspi: add support for passing NTLMv2 hash
2014-06-18 16:02:13 -04:00
Marc-André Moreau
e272bc923e
libwinpr-sspi: fix server-side NTLM authentication against NTLMv2 without key exchange
2014-06-18 14:42:35 -04:00
Marc-André Moreau
1b93dca6c0
libwinpr-sspi: add support for querying user+domain and setting NTLM hash
2014-06-10 16:38:16 -04:00
Marc-André Moreau
8a343c3e6d
libwinpr-sspi: fix memory leaks
2014-06-10 14:16:02 -04:00
Marc-André Moreau
a27c7d85ed
libwinpr-sspi: patch some memory leaks
2014-06-10 08:40:04 -04:00
Marc-André Moreau
0ebc7e2ab4
libwinpr-sspi: add custom API for passing NTLM hashes and credentials dynamically
2014-06-09 15:25:00 -04:00
Marc-André Moreau
ac9b527991
libwinpr-sspi: fix NTLM SPN context helper
2014-06-08 09:14:49 -04:00
Marc-André Moreau
66d2b3ed93
libwinpr-sspi: fix server-side negotiate module
2014-06-07 17:08:07 -04:00
Marc-André Moreau
03cf7933d9
libwinpr-sspi: start implementing and using negotiate sspi module
2014-06-07 16:26:57 -04:00
Marc-André Moreau
a07f616895
libwinpr-sspi: improve link interface
2014-06-07 10:50:51 -04:00
Marc-André Moreau
1b5a2340d2
libwinpr-sspi: even more code hardening
2014-06-07 00:17:11 -04:00
Marc-André Moreau
220f885774
libwinpr-sspi: code hardening
2014-06-06 17:20:34 -04:00
Marc-André Moreau
c5a1a8ac27
libwinpr-sspi: fix native sspi build
2014-06-05 22:10:08 -04:00
Marc-André Moreau
21a259927a
libwinpr-sspi: fix encoding of server-side NTLM challenge message
2014-01-24 13:02:45 -05:00
Marc-André Moreau
652dbfd50d
libwinpr-sspi: fix NTLM TargetName bug
2013-12-17 11:51:13 -05:00
Marc-André Moreau
b8a1f7d6c0
freerdp: implement restricted admin mode pass-the-hash option
2013-11-06 10:02:58 -05:00
Armin Novak
a3b531c036
Fixed issues found with clang-analyzer
2013-09-05 12:14:33 +02:00
Armin Novak
62330ca669
Fixed variable mixup.
2013-09-05 12:14:33 +02:00
Armin Novak
f231f3fcc5
Fixed coverity issue 1047597
2013-09-05 12:14:32 +02:00
Armin Novak
1673e526f5
Fixed coverity issue 1047598
2013-09-05 12:14:32 +02:00
Armin Novak
e2cd11332b
Fixed coverity issue 1047599
2013-09-05 12:14:32 +02:00
Armin Novak
4bd1c567bd
Fixed coverity issue 1047600
2013-09-05 12:14:32 +02:00
Marc-André Moreau
367ebf32a3
freerdp: make use of stream macros to access members
2013-05-15 12:14:26 -04:00
Marc-André Moreau
51715636a5
freerdp: remove some deprecated stream utils
2013-04-29 22:35:15 -04:00
Hardening
7701c9d934
Replace printf(...) by fprintf(stderr, ...)
2013-03-28 23:06:34 +01:00
Bernhard Miklautz
1519152709
winpr/sspi: fixed test TestInitializeSecurityContext
2013-03-15 21:47:24 +01:00
hardening
865ff2a5f8
Fixed compilation with -Wstrict-prototypes
2013-02-14 22:20:43 +01:00
Marc-André Moreau
ff586504e7
libwinpr-sspi: cleanup NTLM messages
2013-01-30 20:39:57 -05:00
Marc-André Moreau
4a5bd8584a
libwinpr-sspi: cleanup NTLM authenticate message construction
2013-01-30 19:47:27 -05:00
Marc-André Moreau
3d77d5a497
freerdp: merging with master
2013-01-14 13:50:16 -05:00
Marc-André Moreau
136bbc8bf7
libwinpr-sspi: start implementing Schannel EncryptMessage
2013-01-11 14:23:54 -05:00
rdp.effort
e53e8e524d
Initialize lpWideCharStr parameter when using ConvertToUnicode
...
This patch ensure that lpWideCharStr is initialized by callers of
ConvertToUnicode
2013-01-10 21:30:32 +01:00
Marc-André Moreau
0fbf846671
libwinpr-sspi: NTLM extended protection cleanup
2013-01-10 11:19:57 -05:00
Marc-André Moreau
f0c94562cc
libfreerdp-core: TS Gateway cleanup and NTLM SingleHostData implementation
2013-01-09 12:05:34 -05:00
Marc-André Moreau
1d893ed268
libwinpr-sspi: add support for NTLMv2 Channel Binding Token (CBT)
2013-01-09 00:20:08 -05:00
Marc-André Moreau
d8949f5d8f
libfreerdp-core: fix computing of test channel binding token
2013-01-08 21:56:28 -05:00
Marc-André Moreau
4cf0dc1004
libwinpr-sspi: improve attempted channel binding token computation
2013-01-06 16:05:20 -05:00
Marc-André Moreau
436a7dfc9f
libwinpr-sspi: enable extended protection by default to restore TSG connectivity with most servers
2012-12-28 11:53:17 -05:00
Marc-André Moreau
81c2782be3
libwinpr-sspi: start implementing Channel Bindings
2012-12-21 12:17:07 -05:00
Marc-André Moreau
038754cbed
libwinpr-sspi: fix SSPI NTLM SuppressExtendedProtection
2012-12-20 16:35:07 -05:00
Marc-André Moreau
0047511055
libwinpr-sspi: fix unicode conversion
2012-12-17 13:35:12 -05:00
Marc-André Moreau
85b023bb08
libwinpr-sspi: remove debug output
2012-12-13 16:30:34 -05:00
Marc-André Moreau
72110807b1
libfreerdp-core: fix NLA
2012-12-13 16:29:16 -05:00
Marc-André Moreau
424ac18eba
libwinpr-utils: simplify winpr stream utils even more
2012-12-10 14:43:48 -05:00
Marc-André Moreau
6e07570dda
libwinpr-utils: simplify stream utils
2012-12-10 14:23:27 -05:00
Marc-André Moreau
c4e06eb0a7
libwinpr-utils: refactor winpr stream utils
2012-12-10 14:08:06 -05:00
Marc-André Moreau
2db4c27be7
libfreerdp-core: fix SPN for TS Gateway
2012-11-27 16:37:56 -05:00
Marc-André Moreau
83473d11d1
channels: patch memory leaks, load addins from list
2012-11-19 13:26:56 -05:00
Marc-André Moreau
a6d1ec0ecf
libwinpr-dsparse: fix on linux
2012-10-28 22:16:21 -04:00
Marc-André Moreau
95766036f4
Merge branch 'channels' of github.com:FreeRDP/FreeRDP into channels
2012-10-26 12:00:39 -04:00
Marc-André Moreau
9eece31e19
libwinpr-sspi: fix SuppressExtendedProtection
2012-10-26 12:00:30 -04:00
Marc-André Moreau
b7a289f843
libwinpr: fix test build on Mac OS X
2012-10-25 15:34:57 -04:00
Marc-André Moreau
373d0fcbb6
libwinpr-sspi: fix SecBufferDesc output buffer on last call to AcceptSecurityContext
2012-08-31 18:04:26 -04:00
Marc-André Moreau
5a16095ddf
libwinpr-sspi: valgrind cleanup
2012-08-23 01:18:47 -04:00
Marc-André Moreau
5184af6b97
libwinpr-sspi: fix PLUID data type in API definitions
2012-08-22 22:38:27 -04:00
Marc-André Moreau
308fe01b3c
libwinpr-sspi: fix API data types
2012-08-22 22:24:29 -04:00
Marc-André Moreau
faa4311232
libwinpr: add proper config.h inclusions
2012-08-14 17:20:53 -04:00
Marc-André Moreau
384af1d93b
include: move winpr include directory inside winpr
2012-08-14 15:49:39 -04:00