Commit Graph

536 Commits

Author SHA1 Message Date
Roger Light
19a9927661 Merge pull request #138 from 251/acldos
Fix use-after-free (DOS) and small memory leak
2016-05-14 23:07:16 +01:00
Roger A. Light
57da586703 Fix saving of persistence messages that start with a '/'.
Closes #151. Thanks to Andrew Chambers.

Signed-off-by: Roger A. Light <roger@atchoo.org>
2016-05-14 22:39:14 +01:00
Roger A. Light
3048c5ba0d Changelog update.
Fix reconnecting for bridges that use TLS on Windows.

Closes #154.

Thanks to Dmitry Kaukov.
2016-05-14 21:57:09 +01:00
Dmitry Kaukov
606aa5b4fa Workaround for Windows SSL (#160)
Closes #154.

Signed-off-by: Dmitry Kaukov <dkaukov@opentable.com>
2016-05-14 21:45:02 +01:00
Roger A. Light
6704df8061 Bridge config parameters can now contain a space
Closes #150.

Thanks to Sebastian Koch and Mikkel Kirkgaard Nielsen.

Bug: https://github.com/eclipse/mosquitto/issues/150
2016-04-28 21:54:50 +01:00
Roger A. Light
3d94aac24a Update for github. 2016-04-26 16:25:38 +01:00
Roger A. Light
f3651b80d4 Update for github. 2016-04-26 16:24:13 +01:00
Roger A. Light
218d74f38d Windows icon. 2016-04-24 22:21:41 +01:00
Roger A. Light
7258b07808 New logo 2016-04-24 22:02:37 +01:00
Roger A. Light
4a67fcebc5 More codacy test fixes. 2016-04-09 22:39:41 +01:00
Roger A. Light
07b21f0fe5 Fix minor test problems highlighted by codacy.com. 2016-04-09 22:18:11 +01:00
Frank Busse
10bb523854 fix 16 byte memory leak
Adds missing free for config->pid_file in mqtt3_config_cleanup.

Signed-off-by: Frank Busse <bb0xfb@gmail.com>
2016-03-24 13:34:39 +01:00
Frank Busse
defbfbd185 DOS: use-after-free in ACL message handling
Removing the last message in queue because of an ACL leaves last_msg
in a corrupted state. Therefore an unauthorized attacker may cause a
segfault of the broker.

Signed-off-by: Frank Busse <bb0xfb@gmail.com>
2016-03-24 13:19:45 +01:00
Roger A. Light
6a9382d864 Fix building on Visual Studio 2015
Closes #136.

Thanks to Pelayo Méndez.
2016-03-17 21:24:50 +00:00
Roger A. Light
caa394d0fe Return value of pthread_create is now checked. 2016-03-17 21:22:56 +00:00
Roger A. Light
d20355c8ac Merging travis config changes across branches.
[ci skip]
2016-03-15 11:47:29 +00:00
Roger A. Light
49936c8ec3 Incorrect quoting. 2016-03-13 21:18:46 +00:00
Roger A. Light
70d1409e62 Updated travis config for fixes branch. 2016-03-13 21:04:47 +00:00
Roger A. Light
69a08ab905 Fix string quoting in CMakeLists.txt. Closes #4. 2016-03-13 20:33:08 +00:00
Roger A. Light
35c4d3d59a Handle some unchecked malloc() calls. Closes #1.
Thanks to Markus Elfring.
2016-03-13 19:07:28 +00:00
Roger A. Light
37238fb645 Don't build debian branch. 2016-03-12 21:14:03 +00:00
Roger A. Light
fda0cb3d45 Fix incorrect $SYS heap memory reporting when using ACLs. 2016-03-12 13:25:20 +00:00
Roger A. Light
32cf2b6743 Allow failures on travis osx. 2016-03-11 22:09:26 +00:00
Roger A. Light
5f7b169391 Travis config update. 2016-03-11 22:04:09 +00:00
Roger A. Light
059bfb0500 Travis build status. 2016-03-11 22:01:02 +00:00
Roger A. Light
a3ec9dca8a Update readme and travis config. 2016-03-11 21:55:33 +00:00
Roger A. Light
abc2f3f9de Network errors are printed correctly on Windows. 2016-03-07 20:57:22 +00:00
Roger A. Light
a79412e3d8 Fix compile error from library keepalive handling. 2016-03-06 19:49:20 +00:00
Roger A. Light
1065a0f202 Will topic isn't truncated when using a mount_point. 2016-03-05 22:38:05 +00:00
Roger A. Light
6bac3f072c Reconnecting client doesn't start with mid=1 again. 2016-03-05 22:34:05 +00:00
Roger A. Light
d9142c3974 [476314] Deliver queued WS client msgs on reconnect.
Thanks to Joking Young and Christoph Krey.

Bug: https://bugs.eclipse.org/bugs/show_bug.cgi?id=476314
2016-03-05 22:31:52 +00:00
Roger A. Light
af995d211d Fix client library keepalive handling.
Fix the case where a message received just before the keepalive timer
expired would cause the client to miss the keepalive timer.

Thanks to Graham Benton.
2016-02-28 17:24:43 +00:00
Roger A. Light
bf959ef9b0 Merge branch 'fixes' 2016-02-14 14:38:42 +00:00
Roger A. Light
5cca6b4239 Bump version number. 2016-02-14 14:10:52 +00:00
Roger A. Light
7a48bcbce8 Script for bumping version numbers. 2016-02-12 21:47:51 +00:00
Roger A. Light
34a7f14fd2 [485131] Fix incorrect detection of FreeBSD and OpenBSD
Thanks to Peter Morjan.

Bug: https://bugs.eclipse.org/bugs/show_bug.cgi?id=485131
2016-02-11 21:52:03 +00:00
Roger A. Light
f588075931 [485589] Close stdin etc. when daemonised.
Bug: https://bugs.eclipse.org/bugs/show_bug.cgi?id=485589
2016-02-11 21:49:55 +00:00
Roger A. Light
eb514c9707 [487178] Obey mount_point when publishing wills.
Wills published by clients connected to a listener with mount_point defined
now correctly obey the mount point. This was a potential security risk
because it allowed clients to publish messages outside of their restricted
mount point. This is only affects brokers where the mount_point option is in
use.

Thanks to Lance Riley.

Bug: https://bugs.eclipse.org/bugs/show_bug.cgi?id=487178
2016-02-11 21:17:55 +00:00
Roger A. Light
9497dab724 Merge branch 'fixes' of ssh://git.eclipse.org:29418/mosquitto/org.eclipse.mosquitto into fixes 2016-02-09 23:06:26 +00:00
Roger A. Light
fd6a6cac14 Only increment inflight msgs when limit not reached. 2016-02-09 23:01:31 +00:00
Roger A. Light
af96c0b8fa [485143] Futher fix for broken win32 connections. 2016-01-19 14:05:39 +00:00
Roger A. Light
11b70d0a95 Force appveyor to use VS 2013. 2016-01-15 12:27:41 +00:00
Roger A. Light
9ed9b06079 Update appveyor openssl version. 2016-01-15 12:12:18 +00:00
Roger A. Light
00491da031 [485143] Fix detection of broken connections on Windows.
Thanks to Pierre-Yves Boisbunon.

Bug: https://bugs.eclipse.org/bugs/show_bug.cgi?id=485143
2016-01-14 21:15:02 +00:00
Roger A. Light
c7d4f4bcff mosq->want_write should be cleared immediately before a call to SSL_write.
This allows clients using mosquitto_want_write() to get accurate results.
2016-01-13 21:32:01 +00:00
Roger A. Light
51f275bd02 Error messages for websockets init failure. 2016-01-07 21:56:16 +00:00
Roger A. Light
646e0a0c32 Merge branch 'fixes' 2015-12-21 11:32:53 +00:00
Roger A. Light
a7136b3672 Bump version number. 2015-12-21 11:32:41 +00:00
Roger A. Light
2549919413 Fix support for libwebsockets 1.22. 2015-12-21 11:32:02 +00:00
Roger A. Light
156442c694 Merge branch 'fixes' 2015-12-20 20:35:30 +00:00