Commit Graph

579 Commits

Author SHA1 Message Date
Keith Winstein 7542070b8f Bump version to 1.1.2b 2012-03-31 17:25:43 -04:00
Keegan McAllister b4ef664bc0 Kill the session after encrypting 2^47 blocks
"Both the privacy and the authenticity properties of OCB degrade as
 per s^2 / 2^128, where s is the total number of blocks that the
 adversary acquires.... In order to ensure that s^2 / 2^128 remains
 small, a given key should be used to encrypt at most 2^48 blocks (2^55
 bits or 4 petabytes)"

-- http://tools.ietf.org/html/draft-krovetz-ocb-03

We deem it unlikely that a legitimate user will send 4 PB through a Mosh
session.  If it happens, we simply kill the session.  The server and
client use the same key, so we actually need to die after 2^47 blocks.

Closes #77.
2012-03-31 16:19:33 -04:00
Keegan McAllister ba6387f36c Allow CryptoExceptions to be fatal 2012-03-31 16:19:33 -04:00
Keith Winstein 519d1ee282 Bump version to 1.1.2a 2012-03-31 15:55:07 -04:00
Keegan McAllister ba9b16aafa Fully initialize the argument to TIOCSWINSZ
struct winsize contains fields other than ws_col and ws_row.  To avoid passing
uninitialized data to TIOCSWINSZ, initialize it first using TIOCGWINSZ.

Found by Valgrind.

(closes #85 github issue)
2012-03-31 15:41:34 -04:00
Keith Winstein 9a7f3ad33d Print warnings when IUTF8 missing 2012-03-31 15:20:30 -04:00
Keith Winstein 9119fa1c7d Add warning and check for IUTF8 2012-03-31 15:07:28 -04:00
Keith Winstein 4f79778ca5 Add warning for C libraries that don't commit to Unicode wchar_t 2012-03-31 15:07:12 -04:00
Keith Winstein edf6ec9052 Insert missing "if-then" instruction in OCB ARM assem so works with Thumb-2.
(closes #86 github issue)

(approved by Ted Krovetz, author of OCB reference implementation)
2012-03-31 14:31:22 -04:00
Keith Winstein eea48e59d3 Avoid compiler warning on platforms where wchar_t is uint32_t (arm) 2012-03-31 14:30:24 -04:00
Keith Winstein 594acf4168 Bump version to 1.1.2 2012-03-28 18:04:11 +02:00
Keith Winstein fe9fa4ff79 Fix Debian changelog 2012-03-28 15:20:31 +02:00
Keith Winstein c868c587d4 Bump version to 1.1.1a 2012-03-28 15:17:24 +02:00
Keith Winstein 0d35baae88 Enforce required headers (closes #69 github issue) 2012-03-28 15:10:29 +02:00
Quentin Smith f2a1271dee -lpoll must come before -lm (which pulls in the system poll implementation) 2012-03-28 14:32:32 +02:00
Quentin Smith 7a4ef054c3 Allow the user to specify CFLAGS and LIBS for linking with poll, and test for -lpoll if necessary 2012-03-28 14:32:32 +02:00
Quentin Smith 44ab7360bc Fix poll.h location 2012-03-28 14:32:32 +02:00
Keegan McAllister 2c4bf49490 configure.ac: Add --with-utempter and --without-utempter
The default is to detect the presence of the library, as before.

Suggested by Michael Weber (github: xmw).

Closes #88.
2012-03-28 06:51:50 -04:00
Quentin Smith 3b2604b81c Handle early gcc compilers that are missing __builtin_bswap64 or __builtin_ctz
(closes #84)
2012-03-26 21:26:33 -04:00
Quentin Smith d867a716b7 Use uintptr_t instead of size_t, since size_t is not guaranteed to be pointer-sized. 2012-03-26 21:18:55 -04:00
Keegan McAllister 0d6875b8be Don't pass -lutil when linking mosh-client
On Android we lack libutil, and we configure with --disable-server.
2012-03-26 20:08:56 -04:00
Keegan McAllister 7ed5174aa7 Move some locale handling into one place 2012-03-26 20:08:55 -04:00
Keegan McAllister 705dcb6483 configure.ac: Don't check for malloc, realloc
When cross-compiling for Android, configure (erroneously?) decides we don't
have a GNU-compatible malloc, and tries to

    #define malloc rpl_malloc

We don't define rpl_malloc, and it's not clear it would work with the <cstdlib>
C++ header, anyway.  See

    http://nerdland.net/unstumping-the-internet/malloc-has-not-been-declared/

If we aren't using malloc(0), it should be safe to use malloc without the check.
2012-03-26 20:08:51 -04:00
Keegan McAllister f46bad0aa0 Rename sse_alloc to aligned_alloc
SSE is x86-specific, but we use this function on all archs.
2012-03-26 20:07:34 -04:00
Keegan McAllister eb02929d00 gitignore config.h.in~ 2012-03-26 20:07:34 -04:00
Keith Winstein 84cb170403 Bump autoconf version to 1.1.1 2012-03-26 19:20:57 -04:00
Keith Winstein 36ae0059c2 Bump version to 1.1.1 2012-03-26 19:20:11 -04:00
Alexander Chernyakhovsky 874d74a06f Update mosh.spec for mosh 1.1.1 2012-03-26 19:13:17 -04:00
Alexander Chernyakhovsky 87d57c9567 Add unistd.h to network.cc to allow mosh to build on Fedora Rawhide (future Fedora 18) 2012-03-26 18:46:52 -04:00
Alexander Chernyakhovsky f0a5c04fbc Update mosh.spec as per RHBZ #806665 Comment 1 2012-03-26 18:32:54 -04:00
Keegan McAllister a9b5850019 Split the fatal_assert message into two lines
(closes #78)
2012-03-24 11:14:42 -04:00
Keegan McAllister 84b4330ba2 Actually print the message on fatal_assert failure 2012-03-24 11:14:30 -04:00
Keith Winstein f71e59949e Fix hyphens stedda dashes in man pages (per lintian) 2012-03-24 11:13:09 -04:00
Quentin Smith 10332ec61f Handle platforms (like Darwin 9) that do not have posix_memalign 2012-03-23 02:17:29 -04:00
Keith Winstein 26fc88634d Update documentation to version 1.1 2012-03-22 19:09:40 -04:00
Keith Winstein 28b42426fe Bump version to 1.1 2012-03-22 18:42:20 -04:00
Keith Winstein ddb73f3927 Bump version to 1.0.9d 2012-03-21 22:47:16 -04:00
Keith Winstein ab94397726 Fix copy-paste error in port argument check 2012-03-21 22:45:58 -04:00
Keith Winstein 11ca4c9440 Update THANKS/AUTHORS 2012-03-21 21:14:54 -04:00
Keith Winstein 96a6d7c63b Bump version number to 1.0.9c 2012-03-21 19:25:56 -04:00
Keith Winstein 0b0ff72f40 Don't display blue "Connecting..." bar immediately 2012-03-21 19:21:02 -04:00
Keith Winstein 00561a95d3 No need to reset scrolling region on close -- we always clean this up 2012-03-21 19:01:35 -04:00
Keith Winstein 76612229d5 Change shutdown sequence (take away DECSTR) 2012-03-21 18:59:04 -04:00
Keith Winstein f8eac780f3 Add configure checks for setrlimit() 2012-03-21 18:43:54 -04:00
Keegan McAllister 9f38c76699 Explicitly disable dumping core (closes #72)
This is a precaution to avoid saving sensitive data to disk, e.g. session keys.
We expect that corefiles are not world readable, but they're still sitting on
the physical disk and it's safer just to disable creating them.

GitHub issue #71 deals with a similar concern.
2012-03-21 18:41:51 -04:00
Alexander Chernyakhovsky b6c3e450fd Update Fedora packaging to error on compiler warnings (closes #73) 2012-03-21 18:39:34 -04:00
Keith Winstein 38b4a26f85 Quote proxycommand in case mosh lives in a directory with a bad name
(per Anders Kaseorg)
2012-03-21 18:10:23 -04:00
Keith Winstein ec0c8c8984 Allow immediate return on initial spins 2012-03-21 18:00:36 -04:00
Keith Winstein 19884d6c85 Don't quote server argument (per Anders Kaseorg) 2012-03-21 17:56:13 -04:00
Keith Winstein ad3877626d Use _exit() for hygiene (per Anders Kaseorg) 2012-03-21 17:32:46 -04:00