diff options
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 124 |
1 files changed, 124 insertions, 0 deletions
@@ -1,3 +1,127 @@ +commit 02b44f8427ea48463d7b9f2a9f7099be7643b60d +Author: Simon McVittie <simon.mcvittie@collabora.co.uk> +Date: 2013-02-25 12:24:35 +0000 + + 0.102: respin tarball + + configure.ac | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +commit 78f3e953e4a05a1126874dd2ca6cec5777a15b3b +Author: Simon McVittie <simon.mcvittie@collabora.co.uk> +Date: 2013-02-15 12:37:04 +0000 + + 0.100.1 point release + + configure.ac | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +commit 166978a09cf5edff4028e670b6074215a4c75eca +Author: Colin Walters <walters@verbum.org> +Date: 2013-02-14 10:19:34 -0500 + + CVE-2013-0292: dbus-gproxy: Verify sender of NameOwnerChanged signals + to be o.f.DBus + + Anyone can hop on the bus and emit a signal whose interface is + o.f.DBus; it's expected at the moments that clients (and notably DBus + libraries) check the sender. + + This could previously be used to trick a system service using + dbus-glib + into thinking a malicious signal came from a privileged source, by + claiming that ownership of the privileged source's well-known name had + changed from the privileged source's real unique name to the + attacker's + unique name. + + [altered to be NULL-safe so it won't crash on peer connections -smcv] + Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> + Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> + + dbus/dbus-gproxy.c | 7 ++++--- + 1 file changed, 4 insertions(+), 3 deletions(-) + +commit c6cbdf9ed99f82983dd529319475dd02c53ad2aa +Author: Simon McVittie <simon.mcvittie@collabora.co.uk> +Date: 2012-06-25 18:23:30 +0100 + + Fix builds without tests + + test/manual/Makefile.am | 5 +++++ + 1 file changed, 5 insertions(+) + +commit a0dd0c8c240896a5dd205c1dbc51924b9d41f833 +Author: Simon McVittie <simon.mcvittie@collabora.co.uk> +Date: 2012-06-25 17:26:48 +0100 + + Prepare version 0.100 + + configure.ac | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +commit 8b7e4a1c4ae055864e26db4addbcc2dc38ee6963 +Author: Simon McVittie <simon.mcvittie@collabora.co.uk> +Date: 2012-04-16 12:11:38 +0100 + + Fix two crashes when dbus_g_proxy_new_for_peer is used on a bus + + The first part of the bug is that when NameOwnerChanged is received + with + a dbus_g_proxy_new_for_peer (which has no name) alive, checking + whether it was affected by the NameOwnerChanged caused a NULL + dereference and segfault. + + The second part of the bug is that if the last proxy in existence is + for a peer, when it was unregistered there would be no + owner_match_rules, + causing a crash. + + Both are exercised in the new test added here. + + Bug: https://bugs.freedesktop.org/show_bug.cgi?id=41126 + Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> + Reviewed-by: Will Thompson <will.thompson@collabora.co.uk> + + .gitignore | 1 + + dbus/dbus-gproxy.c | 5 +- + test/core/Makefile.am | 3 + + test/core/peer-on-bus.c | 148 + +++++++++++++++++++++++++++++++++++++++++++++++ + test/core/run-test.sh | 1 + + 5 files changed, 156 insertions(+), 2 deletions(-) + +commit 82d45d15088d206f1e1f024215e95301fa04e92c +Author: Simon McVittie <simon.mcvittie@collabora.co.uk> +Date: 2012-04-16 12:10:37 +0100 + + Add a utility function to tear down a private connection in tests + + Bug: https://bugs.freedesktop.org/show_bug.cgi?id=41126 + Reviewed-by: Will Thompson <will.thompson@collabora.co.uk> + + configure.ac | 1 + + test/Makefile.am | 4 +-- + test/core/Makefile.am | 4 ++- + test/interfaces/Makefile.am | 4 ++- + test/lib/Makefile.am | 19 ++++++++++++ + test/lib/util.c | 69 + +++++++++++++++++++++++++++++++++++++++++++ + test/lib/util.h | 32 ++++++++++++++++++++ + 7 files changed, 129 insertions(+), 4 deletions(-) + +commit 403c5bf4d98fcba83caa94aee96da27128bbf9c8 +Author: Matthias Klose <doko@ubuntu.com> +Date: 2012-06-25 17:11:45 +0100 + + Fix build error with -Werror=format-security + + Origin: vendor, Ubuntu + Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk> + + dbus/dbus-gobject.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + commit ae0ed3e435c550c3fae1a86a1c3cb42da319dff2 Author: Simon McVittie <simon.mcvittie@collabora.co.uk> Date: 2011-09-28 17:42:44 +0100 |