| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| | | |_|/
| |/| | |
|
| |\ \ \ \
| |_|_|/
|/| | |
| | | | |
7d81850 epee: fix network timeouts in blocked_mode_client (xiphon)
|
| | |/ / |
|
| |\ \ \
| | | |
| | | |
| | | | |
1b91beb abstract_tcp_server2: fix lingering connections (moneromooo-monero)
|
| | |/ /
| | |
| | |
| | |
| | |
| | | |
Resetting the timer after shutdown was initiated would keep
a reference to the object inside ASIO, which would keep the
connection alive until the timer timed out
|
| |\ \ \
| |_|/
|/| |
| | | |
Coverity fixes [3a81639, 1bd962d, 2825f07, d099658, d46f701, cd57a10] (anonimal)
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The problem actually exists in two parts:
1. When sending chunks over a connection, if the queue size is
greater than N, the seed is predictable across every monero node.
>"If rand() is used before any calls to srand(), rand() behaves as if
it was seeded with srand(1). Each time rand() is seeded with the same seed, it
must produce the same sequence of values."
2. The CID speaks for itself: "'rand' should not be used for security-related
applications, because linear congruential algorithms are too easy to break."
*But* this is an area of contention.
One could argue that a CSPRNG is warranted in order to fully mitigate any
potential timing attacks based on crafting chunk responses. Others could argue
that the existing LCG, or even an MTG, would suffice (if properly seeded). As a
compromise, I've used an MTG with a full bit space. This should give a healthy
balance of security and speed without relying on the existing crypto library
(which I'm told might break on some systems since epee is not (shouldn't be)
dependent upon the existing crypto library).
|
| | | | |
|
| | | | |
|
| | | |
| | |
| | |
| | | |
use mfatal/merror/mwarning/minfo/mdebug/mtrace
|
| |\ \ \
| | | |
| | | |
| | | | |
ab2819a depends: attempt to fix readline (iDunk5400)
|
| | |/ /
| | |
| | |
| | | |
Make readline actually compile, and make ncurses use existing terminfo data (if available).
|
| | | |
| | |
| | |
| | |
| | | |
As a side effect, colouring on Windows should now work
regardless of version
|
| |\ \ \
| |_|/
|/| |
| | | |
73f22c4 depends: fix MacOS build with Clang 3.7.1 (vtnerd)
|
| | |/ |
|
| | |
| |
| |
| |
| | |
IP addresses are stored in network byte order even on little
endian hosts
|
| | | |
|
| | | |
|
| |/
|
|
| |
IPv4 addresses are kept in network byte order in memory
|
| |\
| |
| |
| | |
2a41dc0 epee: fix connections not being properly closed in some instances (moneromooo-monero)
|
| | |
| |
| |
| | |
Fixed by Fixed by crCr62U0
|
| |\ \
| | |
| | |
| | |
| | | |
bdcdb0e Remove unused code under WINDWOS_PLATFORM guard (tomsmeding)
a84aa04 syncobj.h no longer defines shared_guard, so remove those define's (tomsmeding)
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The removed preprocessor macro's refer to types that are not defined in
the file anymore; the only other place where shared_guard is defined is
in winobj.h, which also defines the same macro's. Therefore, this change
is safe.
(Side note is that these macro's weren't used at all anyway, but that is
orthogonal to the issue.)
|
| | | |
| | |
| | |
| | |
| | | |
This code has been present, unchanged, ever since the original move to
github in 2014 with commit 296ae46ed.
|
| |\ \ \
| | | |
| | | |
| | | | |
1a367d6 simplewallet: lock console on inactivity (moneromooo-monero)
|
| | | | | |
|
| | | | | |
|
| |/ / / |
|
| | |/
|/| |
|
| | | |
|
| |\ \
| | |
| | |
| | |
| | | |
fcbf7b3 p2p: propagate out peers limit to payload handler (moneromooo-monero)
098aadf p2p: close the right number of connections on setting max in/out peers (moneromooo-monero)
|
| | | | |
|
| |\ \ \
| | | |
| | | |
| | | | |
a182df2 Bans for RPC connections (hyc)
|
| | |/ /
| | |
| | |
| | |
| | | |
Make bans control RPC sessions too. And auto-ban some bad requests.
Drops HTTP connections whenever response code is 500.
|
| | |/
|/|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
new cli options (RPC ones also apply to wallet):
--p2p-bind-ipv6-address (default = "::")
--p2p-bind-port-ipv6 (default same as ipv4 port for given nettype)
--rpc-bind-ipv6-address (default = "::1")
--p2p-use-ipv6 (default false)
--rpc-use-ipv6 (default false)
--p2p-require-ipv4 (default true, if ipv4 bind fails and this is
true, will not continue even if ipv6 bind
successful)
--rpc-require-ipv4 (default true, description as above)
ipv6 addresses are to be specified as "[xx:xx:xx::xx:xx]:port" except
in the cases of the cli args for bind address. For those the square
braces can be omitted.
|
| |\ \
| | |
| | |
| | | |
9a6006b abstract_tcp_server2: move some things out of a lock (moneromooo-monero)
|
| | | |
| | |
| | |
| | |
| | | |
The lock is meant for the network throttle object only,
and this should help coverity get unconfused
|
| |\ \ \
| | | |
| | | |
| | | | |
6abaaaa remove obsolete save_graph skeleton code (moneromooo-monero)
|
| | |/ / |
|
| |\ \ \
| | | |
| | | |
| | | | |
f61a315 net_utils: fix m_ssl type from time_t to bool (moneromooo-monero)
|
| | |/ / |
|
| | |/
|/| |
|
| | |
| |
| |
| |
| | |
NULL is valid when size is 0, but memcpy uses nonnull attributes,
so let's not poke the bear
|
| | | |
|
| | |
| |
| |
| | |
Reported by guidov
|
| |\ \
| | |
| | |
| | | |
b0a04f7 epee: fix SSL autodetect on reconnection (xiphon)
|
| | | | |
|
| | | |
| | |
| | |
| | | |
GCC wants operator= aand copy ctor to be both defined, or neither
|
| |/ / |
|
| |\ \
| | |
| | |
| | | |
9a7a453 net_ssl: free certs after setting them up (moneromooo-monero)
|