[prev in list] [next in list] [prev in thread] [next in thread] 

List:       silc-devel
Subject:    [Silc-devel] [ANNOUNCE] SILC 20010211
From:       Pekka Riikonen <silc () poseidon ! pspt ! fi>
Date:       2001-02-11 14:14:25
Message-ID: Pine.LNX.4.10.10102111610380.20755-100000 () poseidon ! pspt ! fi
[Download RAW message or body]

A new development version 20010211 of SILC is available.  The software is
available from http://silc.pspt.fi web site:

        http://silc.pspt.fi/silc-20010211.tar.gz
        ftp://silc.pspt.fi/pub/silc/snapshots/

This is security update.  I had a little code auditing weekend here and
this release is the result of that.  The upgrading is of course highly
recommended.

Changes to previous version:

        * A big code auditing weekend happening.  Auditing code for
          obvious mistakes, bugs and errors.  Also, removing any code
          that is obsolete.

          Removed files for being obsolete:

          o lib/silcutil/silcbuffer.c (the buffer interface is entirely in
          inline in the file lib/silcutil/silcbuffer.h)

          o lib/silcutil/silcbufutil.c (the header has inline versions)

          Changed code to fix possible error conditions:

          o The buffer formatting routines now check that the destination
          buffer really has enough space to add the data.  This applies for
          both buffer formatting and unformatting
          (lib/silcutil/silcbuffmt.[ch]).  Also, the entire buffer
          unformatting was changed to accomodate following rules:
          XXX_*STRING_ALLOC will allocate space for the data into the pointer
          sent to the function while XXX_*STRING will not allocate or copy
          the data into the buffer.  Instead it sets the pointer from the
          buffer into the pointer sent as argument (XXX_*STRING used to
          require that the pointer must be allocated already).  This change
          makes this whole thing a bit more consistent and more optimized
          (note that the data returned in the unformatting with XXX_*STRING
          must not be freed now).  The routines return now -1 on error.

          o Tried to find all code that use buffer_format and buffer_unformat
          and added return value checking to prevent formatting and
          especially unformatting errors and possible subsequent fatal
          errors.

          o Changed ske->x and ske->KEY to mallocated pointers in
          lib/silcske/silcske.h.  Fixed possible data and memory leak.

          o Added return value checking to all *_parse* functions.  Fixed
          many memory leaks as well.

          o Added length argument to silc_id_str2id in lib/silccore/id.[ch]
          so that buffer overflows would not happen.  All code now also
          checks the return value as it can fail.

        * Added reconnection support to server if the normal server looses
          its connection to the router (for example if router is rebooted).
          The server performs normal reconnection strategy implemented
          to the server.  Affected file silcd/server.c.

        * Added new packet type SILC_PACKET_SET_MODE that is used to
          distribute the information about changed modes (for clients,
          channels and clients channel modes) to all routers in the
          network.  Updated the protocol specification accordingly.

          Added functions into silcd/packet_send.c and
          silcd/packet_receive.c: silc_server_send_set_mode,
          silc_server_set_mode.

          Added new files silcmode.[ch] into lib/silccore that implements
          the encoding and decoding of Set Mode Payload.  Added new type
          SilcSetModePayload.  Moved the definitions of different modes

	Pekka
________________________________________________________________________
 Pekka Riikonen                    | Email: priikone@poseidon.pspt.fi
 SSH Communications Security Corp. | http://poseidon.pspt.fi/~priikone
 Tel. +358 (0)40 580 6673          | Kasarmikatu 11 A4, SF-70110 Kuopio
 PGP KeyID A924ED4F: http://poseidon.pspt.fi/~priikone/pubkey.asc



[prev in list] [next in list] [prev in thread] [next in thread]