Commit graph

4990 commits

Author SHA1 Message Date
Graham Leggett
f3b49ffa10 ITS#10149 - Allow certificates and keys to be read from URIs 2025-12-15 22:52:13 +00:00
Howard Chu
148e940fda ITS#9305 libldap: don't mask ld_errno if set during connect failure 2025-12-09 15:06:05 +00:00
Howard Chu
b0e95d023a ITS#9305 libldap: report errmsg from hostname lookup failures
Use new LDAP_X_SERVER_UNKNOWN error code for failed lookups.
2025-12-09 15:06:05 +00:00
Howard Chu
7055e08841 ITS#10410 lutil_strncopy: refix prev commit 2025-12-01 16:16:10 +00:00
Howard Chu
a946853b12 ITS#10410 lutil_strncopy: fix prev commit 2025-12-01 15:56:36 +00:00
Howard Chu
a16f196903 ITS#10410 lutil_strncopy: fix off by one 2025-12-01 15:18:54 +00:00
Ondřej Kuzník
8651f98a08 ITS#9739 Let configure options influence the symbol version map 2025-11-04 16:23:58 +00:00
Quanah Gibson-Mount
32c2e5a451 Merge remote-tracking branch 'origin/mdb.RE/0.9' 2025-11-04 15:46:45 +00:00
Nadezhda Ivanova
9731103ffb ITS#10390 ldif_parse_line2 calculates an incorrect length of the attribute type 2025-10-21 18:22:05 +00:00
Nadezhda Ivanova
138422cbe9 ITS#10388 ldif_parse_line2 is not compliant with RFC2849 2025-10-21 18:22:05 +00:00
Howard Chu
b0f486e72e ITS#10401 liblber: fix shift of negative int in ber_decode_int()
There's no actual possibility of overflow but sanitizers will complain.
2025-10-17 15:26:08 +01:00
Howard Chu
44815be4da ITS#10400 libldap: fix NULL deref in ldap_parse_result()
Broken by patch for ITS#10229.
2025-10-16 16:49:53 +01:00
Howard Chu
270c543828 ITS#9564 2025-10-15 18:13:58 +01:00
Howard Chu
b807ef1345 ITS#9564 lmdb: fix race condition freeing spilled pages at end of transaction 2025-10-15 18:13:18 +01:00
Howard Chu
7259296081 ITS#10396 fix mdb_cursor_del0 with multiple DUPSORT cursors 2025-10-06 16:53:18 +01:00
Howard Chu
c47b113674 ITS#10396 lmdb: fix mdb_cursor_del0 with multiple DUPSORT cursors
Use the correct stack index when adjusting other cursors pointing to
the affected page and the DB has a subDB. Broken in ITS#8406.
2025-10-06 16:52:32 +01:00
Quanah Gibson-Mount
eae9c380d0 Merge remote-tracking branch 'origin/mdb.RE/0.9' 2025-09-17 17:39:20 +00:00
Caolán McNamara
f584da2fe7 ITS#10375 libldap/tls2: const up oids
to move it out of the .data section
2025-07-28 15:19:04 +01:00
Howard Chu
7d2805f27c ITS#10370 libldap: don't assert on network input 2025-07-23 22:05:25 +01:00
Howard Chu
76e1492809 ITS#10356 libldap: implement LDAP_OPT_REFHOPLIMIT 2025-06-20 02:35:44 +00:00
Michael Kourlas
585e6aa9a5 ITS#10330 keep socket non-blocking during polling in ldap_int_tls_start
During TLS negotiation, if a timeout is set, ldap_int_tls_start sets the
socket to non-blocking and calls ldap_int_poll in a loop if
ldap_int_tls_connect does not succeed the first time it is called.

However, ldap_int_poll sets the socket back to blocking and we currently
do not set it back to non-blocking. This means that a subsequent call to
ldap_int_tls_connect may hang and the configured timeout will not be
enforced. To fix this, we now set the socket back to non-blocking after
ldap_int_poll is called.
2025-06-19 13:49:40 +00:00
Michael Kourlas
76b9c476dd ITS#10330 do not poll socket in ldap_int_tls_start if no timeout set
This probably had no effect, but is unnecessary.
2025-06-19 13:49:40 +00:00
Howard Chu
f7c1754e36 ITS#10355 2025-06-12 15:18:48 +01:00
Howard Chu
7c7988003b ITS#10355 lmdb mplay: don't assign to stdin/stdout 2025-06-12 15:16:50 +01:00
Howard Chu
c85bcff9c5 ITS#10346 2025-06-10 20:57:48 +01:00
Mike Moritz
7f8f52e0e2 ITS#10346 lmdb: fix compacting copy with large values 2025-06-10 20:56:50 +01:00
Howard Chu
529442b4cb ITS#10342 2025-06-10 20:43:44 +01:00
jinyaoguo
ce339e82bd ITS#10342 lmdb: fix potential memleak in child txn_begin 2025-06-10 20:39:52 +01:00
Ondřej Kuzník
6063498361 ITS#10297 Defer hostname resolution til first use 2025-05-09 09:31:26 +01:00
Howard Chu
e5a545d54c ITS#10328 librewrite: fix substitution cleanup 2025-04-24 16:47:31 +00:00
Howard Chu
10456f5850 ITS#10326 mbedtls: always call mbedtls_ssl_set_hostname()
Even if hostname is NULL, the library requires this be called once.
If non-NULL, mbedtls may do a hostname check which is redundant
since libldap does its own check.
2025-04-22 17:26:46 +01:00
Howard Chu
ac89f42433 ITS#10296 lmdb: fix typo in prev commit 2025-02-19 09:15:27 +00:00
Howard Chu
96bffc9202 ITS#10296 fix fdatasync on MacOS 2025-01-28 17:29:56 +00:00
kero
f6b3c3d407 ITS#10296 lmdb: fix fdatasync on MacOS
Patch from kero, with corrections by hyc
2025-01-28 17:28:15 +00:00
Ondřej Kuzník
2ba10ad59c ITS#10229 Adjust ldap_result behaviour with LDAP_MSG_RECEIVED 2024-12-16 16:18:53 +00:00
Ondřej Kuzník
d143f7a2dc ITS#8047 Fix TLS connection timeout handling
The test for async in ldap_int_tls_start was inverted, we already
support calling ldap_int_tls_connect repeatedly. And so long as
LBER_SB_OPT_NEEDS_* are managed correctly, the application should be
able to do the right thing.

Might require a new result code rather than reporposing
LDAP_X_CONNECTING for this.
2024-10-26 20:51:35 +00:00
Howard Chu
790ed0e911 ITS#10275 mdb_load: add -Q option to use NOSYNC for faster loading 2024-10-26 21:27:01 +01:00
Gary Wicker
c5f0ac271c ITS#10275 mdb_load: add -Q option to use NOSYNC for faster loading 2024-10-26 21:26:17 +01:00
Ondřej Kuzník
40b6592adf ITS#10263 Reject modifications with invalid whitespace 2024-10-26 16:49:39 +00:00
Ondřej Kuzník
3f6cec3b46 ITS#10264 Free NoD data we stored locally 2024-10-02 13:23:44 +01:00
Ondřej Kuzník
139944ac1e ITS#7982 Log TLS proto+cipher suite on client side 2024-09-27 14:21:20 +01:00
Ryan Tandy
aa7b1a3db9 ITS#10253 Fix incompatible pointer type 2024-08-21 17:48:45 -07:00
Howard Chu
c9ab732ec1 ITS#10247 libldap: add ldap_url_check_ext() to check URL extensions
And check validity earlier, in ldap_initialize() and ldap_init_fd().
2024-08-20 15:39:04 +00:00
Howard Chu
4fc6a3c064 ITS#10247 libldap: reject unrecognized critical URL extensions 2024-08-20 15:39:04 +00:00
Quanah Gibson-Mount
f6d015dd84 ITS#10222 2024-06-28 15:55:18 +00:00
Howard Chu
c6a49d7963 LMDB: tweak mdb_load.1 manpage
Add missing -a option to Synopsis
2024-06-28 14:55:06 +00:00
Zach Vonler
b84c35053b ITS#10222 LMDB: Updated mdb_dump man page
The -a option to mdb_load makes the previous text obsolete.
2024-06-28 14:55:01 +00:00
Quanah Gibson-Mount
54f00bd01f Return to engineering 2024-06-24 16:56:14 +00:00
Howard Chu
1fc09713b1 ITS#10224 libldap: check for OpenSSL EVP_Digest* failure 2024-06-07 15:34:23 +01:00
Howard Chu
4dfe057b58 ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure 2024-06-07 15:34:01 +01:00