summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #5638v0.14.1.0Riccardo Spagni2019-06-144-4/+5
|\ | | | | | | 6ed1679b prep for 0.14.1 release (Riccardo Spagni)
| * prep for 0.14.1 releaseRiccardo Spagni2019-06-134-4/+5
| |
* | Merge pull request #5640Riccardo Spagni2019-06-1415-28/+78
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | | | | | 542cab02 rpc: restrict the recent cutoff size in restricted RPC mode (moneromooo-monero) 434e617a ensure no NULL is passed to memcpy (moneromooo-monero) 279f1f2c abstract_tcp_server2: improve DoS resistance (moneromooo-monero) 756773e5 serialization: check stream good flag at the end (moneromooo-monero) e3f714aa tree-hash: allocate variable memory on heap, not stack (moneromooo-monero) 67baa3a6 cryptonote: throw on tx hash calculation error (moneromooo-monero) d6bb9ecc serialization: fail on read_varint error (moneromooo-monero) 19490e44 cryptonote_protocol: fix another potential P2P DoS (moneromooo-monero) fa4aa47e cryptonote_protocol: expand basic DoS protection (moneromooo-monero) 3c953d53 cryptonote_protocol_handler: prevent potential DoS (anonimal) b873b69d epee: basic sanity check on allocation size from untrusted source (moneromooo-monero)
| * rpc: restrict the recent cutoff size in restricted RPC modemoneromooo-monero2019-06-141-0/+9
| |
| * ensure no NULL is passed to memcpymoneromooo-monero2019-06-144-9/+18
| | | | | | | | | | NULL is valid when size is 0, but memcpy uses nonnull attributes, so let's not poke the bear
| * abstract_tcp_server2: improve DoS resistancemoneromooo-monero2019-06-141-4/+5
| |
| * serialization: check stream good flag at the endmoneromooo-monero2019-06-143-6/+6
| | | | | | | | just in case
| * tree-hash: allocate variable memory on heap, not stackmoneromooo-monero2019-06-141-5/+7
| | | | | | | | | | | | Large amounts might run out of stack Reported by guidov
| * cryptonote: throw on tx hash calculation errormoneromooo-monero2019-06-141-3/+3
| |
| * serialization: fail on read_varint errormoneromooo-monero2019-06-141-1/+2
| |
| * cryptonote_protocol: fix another potential P2P DoSmoneromooo-monero2019-06-141-0/+15
| | | | | | | | | | When asking for txes in a fluffy transaction, one might ask for the same (large) tx many times
| * cryptonote_protocol: expand basic DoS protectionmoneromooo-monero2019-06-142-4/+4
| | | | | | | | Count transactions as well
| * cryptonote_protocol_handler: prevent potential DoSanonimal2019-06-142-0/+12
| | | | | | | | | | | | | | | | | | | | Essentially, one can send such a large amount of IDs that core exhausts all free memory. This issue can theoretically be exploited using very large CN blockchains, such as Monero. This is a partial fix. Thanks and credit given to CryptoNote author 'cryptozoidberg' for collaboration and the fix. Also thanks to 'moneromooo'. Referencing HackerOne report #506595.
| * epee: basic sanity check on allocation size from untrusted sourcemoneromooo-monero2019-06-141-0/+1
|/ | | | Reported by guidov
* Merge pull request #5633luigi11112019-06-126-5/+10
|\ | | | | | | | | | | | | cfa88ac Don't use -march=native (hyc) e85bf46 Allow parallel make (hyc) 0ef8391 Delete redundant cppzmq dependency (hyc) 86591eb Use 9 digit build IDs (hyc)
| * Use 9 digit build IDsHoward Chu2019-06-124-1/+5
| |
| * Delete redundant cppzmq dependencyHoward Chu2019-06-121-1/+1
| |
| * Allow parallel makeHoward Chu2019-06-123-3/+3
| |
| * Don't use -march=nativeHoward Chu2019-06-121-0/+1
| |
* | Merge pull request #5631luigi11112019-06-121-2/+2
|\ \ | |/ |/| | | c27d961 [depends] update openssl to 1.0.2r (who-biz)
| * [depends] update openssl to 1.0.2rwho-biz2019-05-181-2/+2
| | | | | | | | | | | | | | | | - This addresses https://www.openssl.org/news/secadv/20190226.txt (CVE: 2019-1559) which impacted all versions of openssl-1.0. Note that this does not address CVE-2019-1543 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1543), which impacts all versions of openssl 1.1 through 1.1.0j and 1.1.1b. The above (1.1) is patched in openssl, where it was marked as low severity. Similar issues possibly present in monero, should be looked into w.r.t. CVE-2019-1543.
* | Merge pull request #5614luigi11112019-06-115-6/+31
|\ \ | | | | | | | | | | | | | | | 4cff925 p2p: fix GCC 9.1 crash (monermooo-monero) f47488c Fix GCC 9.1 build warnings (moneromooo-monero) ce13a98 cmake: do not use -mmitigate-rop on GCC >= 9.1 (moneromooo-monero)
| * | cmake: do not use -mmitigate-rop on GCC >= 9.1moneromooo-monero2019-06-091-2/+5
| | | | | | | | | | | | | | | It was removed, but it still accepted by the compiler, which warns for every file
| * | Fix GCC 9.1 build warningsmoneromooo-monero2019-06-093-0/+20
| | | | | | | | | | | | GCC wants operator= aand copy ctor to be both defined, or neither
| * | p2p: fix GCC 9.1 crashmoneromooo-monero2019-06-081-4/+6
| | |
* | | Merge pull request #5622luigi11112019-06-111-6/+4
|\ \ \ | | | | | | | | | | | | b0a04f7 epee: fix SSL autodetect on reconnection (xiphon)
| * | | epee: fix SSL autodetect on reconnectionxiphon2019-06-101-6/+4
| | |/ | |/|
* | | Merge pull request #5620luigi11112019-06-114-18/+8
|\ \ \ | | | | | | | | | | | | 117f950 miner: fix double free of thread attributes (ston1th)
| * | | miner: fix double free of thread attributesston1th2019-06-094-18/+8
| | |/ | |/| | | | | | | issue: #5568
* | | Merge pull request #5617luigi11112019-06-111-0/+0
|\ \ \ | |/ / |/| | | | | 6375111 miniupnpc: update to build on BSD (moneromooo-monero)
| * | miniupnpc: update to build on BSDmoneromooo-monero2019-06-081-0/+0
|/ /
* | Merge pull request #5584Riccardo Spagni2019-06-0115-59/+60
|\ \ | | | | | | | | | eeebad66 functional_tests: fix python3 compatibility (moneromooo-monero)
| * | functional_tests: fix python3 compatibilitymoneromooo-monero2019-05-2915-59/+60
| |/ | | | | | | Also add missing bans test to the default tests
* | Merge pull request #5578Riccardo Spagni2019-06-011-1/+7
|\ \ | | | | | | | | | b7a96a08 core: update pruning if using --prune-blockchain on a pruned blockchain (moneromooo-monero)
| * | core: update pruning if using --prune-blockchain on a pruned blockchainmoneromooo-monero2019-05-281-1/+7
| |/ | | | | | | | | Avoids a massive amount of spurious warnings if the last update before the daemon exited was a while ago and the daemon was syncing
* | Merge pull request #5572Riccardo Spagni2019-06-015-14/+54
|\ \ | | | | | | | | | | | | a663ccba blockchain: do not try to pop blocks down to the genesis block (moneromooo-monero) 8f2a99d8 core: do not commit half constructed batch db txn (moneromooo-monero)
| * | blockchain: do not try to pop blocks down to the genesis blockmoneromooo-monero2019-05-261-0/+3
| | |
| * | core: do not commit half constructed batch db txnmoneromooo-monero2019-05-255-14/+51
| |/
* | Merge pull request #5551Riccardo Spagni2019-06-015-3381/+3403
|\ \ | | | | | | | | | de6cfacc refresh and update translations for new release (erciccione)
| * | refresh and update translations for new releaseerciccione2019-05-175-3381/+3403
| |/
* | Merge pull request #5565Riccardo Spagni2019-06-0115-142/+169
|\ \ | | | | | | | | | | | | | | | 4456a4b9 Fix allow any cert mode in wallet rpc when configured over rpc (Lee Clagett) fafc5c36 Add ssl_options support to monerod's rpc mode. (Lee Clagett) ce73cc3a Fix configuration bug; wallet2 --daemon-ssl-allow-any-cert now works. (Lee Clagett)
| * | Fix allow any cert mode in wallet rpc when configured over rpcLee Clagett2019-05-211-1/+5
| | |
| * | Add ssl_options support to monerod's rpc mode.Lee Clagett2019-05-2114-140/+160
| | |
| * | Fix configuration bug; wallet2 --daemon-ssl-allow-any-cert now works.Lee Clagett2019-05-211-1/+4
| |/
* | Merge pull request #5562Riccardo Spagni2019-06-011-1/+10
|\ \ | | | | | | | | | 13864702 functional_tests: fix rare get_output_distribution failure (moneromooo-monero)
| * | functional_tests: fix rare get_output_distribution failuremoneromooo-monero2019-05-221-1/+10
| |/ | | | | | | | | | | | | When the wallet auto refreshes after mining the last two blocks but before popping them, it will then try to use outputs which are not unlocked yet. This is really a wallet problem, which will be fixed later.
* | Merge pull request #5563Riccardo Spagni2019-06-011-1/+1
|\ \ | | | | | | | | | 205a0ba1 unit_tests: make the density test a bit less stringent (moneromooo-monero)
| * | unit_tests: make the density test a bit less stringentmoneromooo-monero2019-05-221-1/+1
| |/ | | | | | | It's an inherently random test
* | Merge pull request #5564Riccardo Spagni2019-06-011-1/+2
|\ \ | |/ |/| | | b6830db2 Fix #5553 (Howard Chu)
| * Fix #5553Howard Chu2019-05-191-1/+2
| | | | | | | | Make sure the tip hash still matches the cached block
generated by cgit v1.2.3 (git 2.51.0) at 2026-08-16 12:39:19 +0000