summaryrefslogtreecommitdiffstats
path: root/common
AgeCommit message (Collapse)AuthorFilesLines
2014-03-21common: add THREAD_ID macroGravatar Nikias Bassen1-0/+2
2014-03-21common: add thread_once() implementationGravatar Nikias Bassen2-0/+25
2014-03-21userpref: Try to output similar error messages in GnuTLS and OpenSSL logicGravatar Martin Szulecki1-1/+5
2014-03-21userpref: fix GnuTLS key generationGravatar Nikias Bassen1-7/+3
2014-03-21userpref: merge pair_record_generate_from_device_public_key() into ↵Gravatar Nikias Bassen2-251/+139
pair_record_generate_keys_and_certs()
2014-03-21userpref: fix mixed up root/host certificate storageGravatar Nikias Bassen1-2/+2
2014-03-21userpref: Remove obsolete dict item check as plist_dict_set_item() takes careGravatar Martin Szulecki1-5/+0
2014-03-21userpref: Fix invalid plist_free() which caused pair process to failGravatar Martin Szulecki1-3/+6
2014-03-21userpref: Use correct import helper for keys and certsGravatar Martin Szulecki1-9/+9
2014-03-21Refactor pair record handling to use new usbmuxd pair record interfaceGravatar Martin Szulecki4-585/+469
This refactoring is mandatory as libimobiledevice should not interact with the pair record configuration directory which is owned by the usbmuxd user. This change also adds compatibility for the native usbmuxd and thus pair records saved by iTunes.
2014-03-20Bump dependency to libplist 1.11 and remove use of "plist_dict_insert_item()"Gravatar Martin Szulecki1-2/+2
2014-03-04common: Include config.h for proper handling of HAVE_STPCPY defineGravatar Martin Szulecki1-0/+4
2013-12-04userpref.c: removed excessive plist_free of a plist dict item.Gravatar Aaron Burghardt1-1/+0
2013-11-06userpref: Fix memory leak in userpref_device_record_get_certs_as_pem()Gravatar Martin Szulecki1-0/+7
2013-11-06userpref: fix incorrect use of BIO_get_mem_data() when generating keys ↵Gravatar Nikias Bassen1-4/+29
(closing #32)
2013-10-25userpref: Use RSA_generate_key_ex() in favor of deprecated RSA_generate_key()Gravatar Martin Szulecki1-2/+10
The RSA_generate_key function has been deprecated in OpenSSL in favour of the newer function RSA_generate_key_ex. RSA_generate_key_ex with its current interface has been part of OpenSSL starting from version 0.9.8 (July 2005).
2013-10-09Remove duplicate newline from debug messages as one is added automaticallyGravatar Martin Szulecki1-1/+1
2013-10-09userpref: Free string in internal_set_value() to fix a memory leakGravatar Martin Szulecki1-0/+2
2013-10-08userpref: Free some plist return values to fix a few memory leaksGravatar Martin Szulecki1-0/+15
2013-09-27userpref: rename 'index' parameter to silece compiler warning on the PiGravatar Nikias Bassen1-2/+2
2013-09-27common/debug: remove inline from debug functions to make clang happyGravatar Nikias Bassen2-8/+8
2013-09-24userpref: return error if remove in userpref_remove_device_record failsGravatar Nikias Bassen1-3/+7
2013-09-21userpref: Use /var/lib/lockdown as the system-wide pair record path on LinuxGravatar Martin Szulecki1-4/+1
2013-09-19userpref: Use system wide pair record path and add config directory getterGravatar Martin Szulecki2-73/+4
2013-09-19userpref: fix leak and possible endless recursion in mkdir_with_parentsGravatar Nikias Bassen1-7/+4
2013-09-19utils: make buffer_write_to_filename overwrite instead of append to existing ↵Gravatar Nikias Bassen1-3/+1
files
2013-09-17userpref: Add missing argument docs for device_record_get_certs_as_pem()Gravatar Martin Szulecki1-0/+1
2013-09-17Make sure to re-use the DeviceCertificate instead of generating a new one ↵Gravatar Nikias Bassen2-2/+15
every time This prevented iTunes from using a pairing made by libimobiledevice giving an error that the device sent invalid data.
2013-09-17Fix broken build of GnuTLS and silence two compiler warningsGravatar Martin Szulecki1-2/+2
2013-09-17userpref: Add copyright referenceGravatar Martin Szulecki2-0/+2
2013-09-17Refactor userpref logic to use plist format and implement trust dialog handlingGravatar Martin Szulecki2-359/+361
iOS 7 introduced a new pairing workflow which increases security by showing a trust dialog to the user before pairing with the host is allowed. The userpref system was refactored to use the native plist format, too. Configuration files of the native implementations are used on each platform. Former configuration files are no longer in use and can be deleted.
2013-09-17common: Add helpers to read and write plist filesGravatar Martin Szulecki2-0/+106
2013-07-15userpref: correctly NULL-terminate arguments in string_concat callsGravatar Nikias Bassen1-2/+2
2013-07-13common: Fix malformed binary debug message dumpingGravatar Martin Szulecki1-1/+1
2013-07-13common: Fix WIN32 portability for recent userpref security fixGravatar Martin Szulecki1-1/+6
2013-07-13common: Implement stpcpy() replacement for systems lacking itGravatar Martin Szulecki2-0/+26
2013-07-02Bug #331 - Don't create a /tmp/root directory insecurelyGravatar Federico Mena Quintero1-29/+76
When finding the user's home directory to generate a subdirectory in $HOME/.config, we would fall back to /tmp if there were no environment variables for HOME or XDG_CONFIG_HOME. Since libimobiledevice gets used by upower, and since upowerd runs as root, this would cause a /tmp/root directory to be created insecurely, leaving upowerd vulnerable to a symlink attack. Now we fall back to getpwuid_r() to find the user's home directory if it is not provided in environment variables - this is the case when upowerd gets run via systemd, for example. The result is that we'll end up creating /root/.config, a safe directory, since regular users cannot create symlinks in /root. In the future we'll need a way for libimobiledevice to find where to store its pairing data on behalf of the console user, rather than writing it to /root. http://libiphone.lighthouseapp.com/projects/27916-libiphone/tickets/331-insecure-tmp-directory-use
2013-07-02common: Add utils.[ch] with a string_concat() functionGravatar Federico Mena Quintero3-1/+114
Instead of doing malloc() and repeated strcat(), which is an O(n^2) way to concatenate multiple strings, we define a single O(total_len) function that uses stpcpy(). This will also make the rest of the code more legible and safer.
2013-05-23Silence compiler warnings for win32 buildsGravatar Martin Szulecki2-1/+3
2013-04-25common: Move debug and userpref code into libinternalcommonGravatar Martin Szulecki5-1/+1465
2013-03-20move thread and socket code to "common" subdirGravatar Nikias Bassen5-0/+600