summaryrefslogtreecommitdiff
path: root/dispatch.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* OpenBSD: Fix broken unveil in calico on 7.2June McEnroe2022-10-301-1/+1
| | | | | | | Relevant OpenBSD changelog: > o AF_UNIX socket bind(2) and connect(2) now follow unveil(2) > configuration.
* Update copyrights, authorsJune McEnroe2022-07-171-1/+1
|
* FreeBSD: Remove capsicum supportC. McEnroe2021-10-051-37/+1
| | | | | capsicum is too impractical and removing it will allow much more straightforward code.
* Use a fixed size pollfd array in calicoC. McEnroe2020-11-131-73/+57
| | | | | My thinking here is that it's better to not allocate in response to incoming connections. This also just makes the code a little simpler.
* Disallow / anywhere in server nameC. McEnroe2020-11-131-1/+1
|
* Check bounds of ClientHello extensions lengthC. McEnroe2020-11-121-1/+3
|
* Sandbox calico with pledge(2) and unveil(2)C. McEnroe2020-08-271-1/+11
|
* Say "OpenSSL" in additional permission noticesC. McEnroe2020-08-061-2/+2
| | | | LibreSSL is "a modified version of that library".
* Remove compat.hC. McEnroe2020-08-011-2/+0
|
* Don't use strlcpy in dispatchC. McEnroe2020-07-241-1/+1
| | | | So that calico doesn't need any libs even on Linux.
* Grant CAP_SETSOCKOPT in dispatchC. McEnroe2020-06-121-1/+1
| | | | | | | This fixes a major issue that somehow didn't surface until upgrading to FreeBSD 12.1-RELEASE-p6, where since calico doesn't grant the CAP_SETSOCKOPT capability on accepted sockets, pounce crashes trying to set keepalive on sockets on receives from it.
* Add additional permission for linking with LibreSSLC. McEnroe2020-06-081-0/+11
| | | | https://www.gnu.org/licenses/gpl-faq.en.html#GPLIncompatibleLibs
* Don't bother setting SO_NOSIGPIPEC. McEnroe2020-05-181-8/+1
| | | | We need to ignore SIGPIPE anyway for other platforms.
* Pass -1 as backlog to listen(2)C. McEnroe2020-05-111-1/+1
| | | | | | There seems to be no guidance on how an application should set this parameter. However, every system I've looked at will limit the value to some default maximum, usually 128.
* Use for loop for getopt in calicoC. McEnroe2020-04-021-2/+1
|
* Do not crash on error from accept in calicoC. McEnroe2020-04-021-1/+4
|
* Avoid a couple VLAs with constant sizeMichael Forney2019-11-201-3/+2
| | | | These are really just regular arrays masquerading as VLAs.
* Use strlcpy for sun_pathsC. McEnroe2019-11-201-1/+1
| | | | | | | | | | | | My understanding is that sun_path need not be nul-terminated, but I didn't notice that SUN_LEN actually requires it. > The length of UNIX-domain address, required by bind(2) and connect(2), > can be calculated by the macro SUN_LEN() defined in <sys/un.h>. The > sun_path field must be terminated by a NUL character to be used with > SUN_LEN(), but the terminating NUL is not part of the address. Thanks to Duncan Overbruck <mail@duncano.de> for the report.
* Declare more missing functions and deal with lack of SO_NOSIGPIPEC. McEnroe2019-11-061-0/+4
|
* Change license to GPLv3C. McEnroe2019-11-061-4/+4
| | | | | | | | | | | | | | > Notwithstanding any other provision of this License, if you modify the > Program, your modified version must prominently offer all users > interacting with it remotely through a computer network (if your version > supports such interaction) an opportunity to receive the Corresponding > Source of your version by providing access to the Corresponding Source > from a network server at no charge, through some standard or customary > means of facilitating copying of software. This potentially means that every freenode user, for example, is interacting with this software, and offering the corresponding source to each of them is an unreasonable burden.
* Send an unrecognized_name alert when failing to dispatchC. McEnroe2019-11-021-3/+19
|
* Apply capsicum to calicoC. McEnroe2019-11-021-2/+29
|
* Don't try to sendfd if connect failedC. McEnroe2019-11-021-2/+4
|
* Add SNI socket dispatcherC. McEnroe2019-11-021-0/+273
pounce can't accept connections from it yet though!