libimobiledevice - A protocol library to access iOS devices on Linux

Age	Commit message (Collapse)	Author	Files	Lines
2013-11-06	userpref: Fix memory leak in userpref_device_record_get_certs_as_pem()	Martin Szulecki	1	-0/+7

2013-11-06	userpref: fix incorrect use of BIO_get_mem_data() when generating keys ↵	Nikias Bassen	1	-4/+29
	(closing #32)
2013-10-25	userpref: Use RSA_generate_key_ex() in favor of deprecated RSA_generate_key()	Martin Szulecki	1	-2/+10
	The RSA_generate_key function has been deprecated in OpenSSL in favour of the newer function RSA_generate_key_ex. RSA_generate_key_ex with its current interface has been part of OpenSSL starting from version 0.9.8 (July 2005).
2013-10-09	Remove duplicate newline from debug messages as one is added automatically	Martin Szulecki	1	-1/+1

2013-10-09	userpref: Free string in internal_set_value() to fix a memory leak	Martin Szulecki	1	-0/+2

2013-10-08	userpref: Free some plist return values to fix a few memory leaks	Martin Szulecki	1	-0/+15

2013-09-27	userpref: rename 'index' parameter to silece compiler warning on the Pi	Nikias Bassen	1	-2/+2

2013-09-24	userpref: return error if remove in userpref_remove_device_record fails	Nikias Bassen	1	-3/+7

2013-09-21	userpref: Use /var/lib/lockdown as the system-wide pair record path on Linux	Martin Szulecki	1	-4/+1

2013-09-19	userpref: Use system wide pair record path and add config directory getter	Martin Szulecki	1	-73/+3

2013-09-19	userpref: fix leak and possible endless recursion in mkdir_with_parents	Nikias Bassen	1	-7/+4

2013-09-17	userpref: Add missing argument docs for device_record_get_certs_as_pem()	Martin Szulecki	1	-0/+1

2013-09-17	Make sure to re-use the DeviceCertificate instead of generating a new one ↵	Nikias Bassen	1	-1/+14
	every time This prevented iTunes from using a pairing made by libimobiledevice giving an error that the device sent invalid data.
2013-09-17	Fix broken build of GnuTLS and silence two compiler warnings	Martin Szulecki	1	-2/+2

2013-09-17	userpref: Add copyright reference	Martin Szulecki	1	-0/+1

2013-09-17	Refactor userpref logic to use plist format and implement trust dialog handling	Martin Szulecki	1	-351/+333
	iOS 7 introduced a new pairing workflow which increases security by showing a trust dialog to the user before pairing with the host is allowed. The userpref system was refactored to use the native plist format, too. Configuration files of the native implementations are used on each platform. Former configuration files are no longer in use and can be deleted.
2013-07-15	userpref: correctly NULL-terminate arguments in string_concat calls	Nikias Bassen	1	-2/+2

2013-07-13	common: Fix WIN32 portability for recent userpref security fix	Martin Szulecki	1	-1/+6

2013-07-02	Bug #331 - Don't create a /tmp/root directory insecurely	Federico Mena Quintero	1	-29/+76
	When finding the user's home directory to generate a subdirectory in $HOME/.config, we would fall back to /tmp if there were no environment variables for HOME or XDG_CONFIG_HOME. Since libimobiledevice gets used by upower, and since upowerd runs as root, this would cause a /tmp/root directory to be created insecurely, leaving upowerd vulnerable to a symlink attack. Now we fall back to getpwuid_r() to find the user's home directory if it is not provided in environment variables - this is the case when upowerd gets run via systemd, for example. The result is that we'll end up creating /root/.config, a safe directory, since regular users cannot create symlinks in /root. In the future we'll need a way for libimobiledevice to find where to store its pairing data on behalf of the console user, rather than writing it to /root. http://libiphone.lighthouseapp.com/projects/27916-libiphone/tickets/331-insecure-tmp-directory-use
2013-05-23	Silence compiler warnings for win32 builds	Martin Szulecki	1	-0/+2

2013-04-25	common: Move debug and userpref code into libinternalcommon	Martin Szulecki	1	-0/+1161