Roger A. Light
78cba447a2
Fix dynsec linking
2024-03-18 14:02:51 +00:00
Roger A. Light
fe80b9b351
Fix message expiry interval
2024-03-18 12:08:57 +00:00
Roger A. Light
7aac727bbf
Fix oss-fuzz 67481
...
Memory overflow due to duplicate usernames and corrupt input parameters in
admin provided password file, hence local only issue.
2024-03-18 09:18:31 +00:00
Roger A. Light
b89ff3f923
Fix fuzzers after refactoring
2024-03-17 23:29:15 +00:00
Roger A. Light
9065b579d0
Refactor topic functions to common static library.
2024-03-17 23:18:35 +00:00
Roger A. Light
4498193331
Refactor file functions to common static library.
2024-03-17 23:13:11 +00:00
Roger A. Light
8cc21d1fa4
Refactor random functions to common static library.
2024-03-17 21:57:15 +00:00
Roger A. Light
16d465fa49
Refactor base64 functions to common static library.
2024-03-17 21:34:27 +00:00
Roger A. Light
9fe8b95dcf
Refactor property functions to common static library.
2024-03-17 20:56:14 +00:00
Roger A. Light
b5c25cf1d0
Refactor memory functions to common static library.
2024-03-17 10:30:07 +00:00
Roger A. Light
81ad44e677
Refactor topic check functions to common static library.
2024-03-17 08:15:22 +00:00
Roger A. Light
a6344f833b
Refactor time functions to common static library.
2024-03-17 07:58:45 +00:00
Roger A. Light
1204a7a6f7
Refactor strings functions to common static library.
2024-03-17 07:46:42 +00:00
Roger A. Light
6eb56dc6f1
Refactor UTF-8 code to common static library.
2024-03-17 07:45:58 +00:00
Roger A. Light
f5195ba442
Fix oss-fuzz 67324
...
Regression in unreleased version.
2024-03-10 15:08:37 +00:00
Roger A. Light
5c8023c329
Fix oss-fuzz 67209
...
Leak caused by corrupt password file, only occurring on startup or
reload.
2024-03-07 10:00:53 +00:00
Roger A. Light
15ac2e410f
No need to call OPENSSL_init_crypto
2024-03-05 14:34:55 +00:00
Roger A. Light
2c7084b16d
Expire restored expired messages immediately.
2024-03-05 14:33:48 +00:00
Roger A. Light
bedb06f03a
Fix cmake build
2024-03-05 10:18:59 +00:00
Roger A. Light
340c4f323f
Rename cmake helper functions.
2024-03-05 09:36:15 +00:00
Roger A. Light
f390469f59
Fix oss-fuzz 67209.
...
Unreleased code, so minor impact.
2024-03-04 21:42:50 +00:00
Roger A. Light
9691ab42f6
Fix incorrect json_get_int call.
2024-03-04 17:39:35 +00:00
Roger A. Light
9f7b23ca72
Fix oss-fuzz 67175, 67180, 67191
...
Embedded 0 characters in a file would prevent the loading of that file.
This could not happen apart from corruption of the file, or by
deliberate manipulation by the admin. Minimal impact.
2024-03-04 14:24:55 +00:00
Roger A. Light
2762a8701f
Default to ptest only
2024-03-03 20:28:46 +00:00
Roger A. Light
73bd5aed3a
oss-fuzz: Minimum size for config test
2024-03-03 11:21:33 +00:00
Roger A. Light
07051019c9
Add ci-fuzz support on PRs
2024-03-03 08:47:35 +00:00
Roger A. Light
1882bdd95b
mosquitto_passwd: Don't exit on signal for oss-fuzz
2024-03-03 08:00:24 +00:00
Roger A. Light
bac0cdbfc3
Fix oss-fuzz priority issue
2024-03-02 19:44:45 +00:00
Roger A. Light
34e07184e0
Fix oss-fuzz 67167.
...
Leak on startup and reload only, assuming a corrupt password file
provided by the admin. Minimal impact.
2024-03-02 19:40:45 +00:00
Roger A. Light
f39ecb3d27
Factor out a load of duplicated makefile code
2024-03-02 10:35:45 +00:00
Roger A. Light
5b41a566b0
Mark deprecated options as being removed in 3.0
2024-03-01 19:16:04 +00:00
Roger A. Light
664c6708b2
Further build fixes for oss-fuzz
2024-03-01 10:18:01 +00:00
Roger A. Light
01230a3c2a
C99 loops
2024-02-29 21:54:38 +00:00
Roger A. Light
4a97baf2b4
Fix file perms for fuzzers
2024-02-29 21:54:18 +00:00
Roger A. Light
63e5f4d370
Allow other exceptions for global max test
2024-02-29 19:54:47 +00:00
Roger A. Light
c6b381df0a
Relabel workflow
2024-02-29 19:45:20 +00:00
Roger A. Light
d77cb0c045
Raise rather than print error
2024-02-29 19:44:30 +00:00
Roger A. Light
229175d5b7
CI ptest attempt
2024-02-29 19:37:13 +00:00
Roger A. Light
6283966636
Test argon2 and pbkdf2 passwords
2024-02-29 19:34:03 +00:00
Roger A. Light
ca98cb5755
Partially revert removal of support for openssl<3 to support oss-fuzz
2024-02-29 10:39:31 +00:00
Roger A. Light
6eaf6e594f
Fix oss-fuzz 58270
...
Memory leak regression in unreleased code.
2024-02-29 10:27:55 +00:00
Roger A. Light
b3b9d1f11b
Fix oss-fuzz 59651
...
If the person creating the mosquitto.conf duplicates the
tls_engine_kpass_sha1 option, there was a memory leak.
Minimal impact, no security risk.
2024-02-29 09:57:38 +00:00
Roger A. Light
8ae926793b
Fix oss-fuzz 59604
2024-02-29 09:39:35 +00:00
Roger A. Light
b199410795
Add more broker fuzzers
2024-02-26 23:44:35 +00:00
Roger A. Light
a9ebf37dab
Remove support for openssl < 3.0
2024-02-26 19:07:22 +00:00
Roger A. Light
8ccef0713b
Test improvements, remove redundant code
2024-02-26 18:25:31 +00:00
Roger A. Light
3d1b132a16
Fuzzing: Force static linking of argon2
2024-02-26 14:12:44 +00:00
Roger A. Light
aa4cf4ce3f
Fuzzer binaries should not use -shared!
2024-02-26 13:38:00 +00:00
Roger A. Light
b96ab2bbd7
Fix test build warnings
2024-02-26 00:19:49 +00:00
Roger A. Light
8a8d6e043e
mosquitto_sub: Add optional hex payload field separation
2024-02-26 00:19:32 +00:00
Roger A. Light