github.com/sudo-project/sudo commits | Ecosyste.ms: OpenCollective

Add a new "fuzz" target that executes the fuzzers for 8192 runs each.

To run indefinately, set FUZZ_RUNS=-1, e.g. "make FUZZ_RUNS=-1 fuzz"

dfff132122979058434550e8bf18c3bd1247ea59 authored over 3 years ago by Todd C. Miller <[email protected]>

Move corpus files to a seed subdirectory.

6eff3b313b790522cf97047ba6478a7d1bd06c13 authored over 3 years ago by Todd C. Miller <[email protected]>

We can now rely on LLVMFuzzerTestOneInput to flush stdout.

5498c6a938dfb1d53b73332c72bd1986e5bdb088 authored over 3 years ago by Todd C. Miller <[email protected]>

Fix fuzz_sudoers output comparison when fuzzing is enabled.

libFuzzer outputs additional info to stderr that our stub doesn't.

bac05791345f24237cf0be348b1be108faccde00 authored over 3 years ago by Todd C. Miller <[email protected]>

Flush stdout before successful return from LLVMFuzzerTestOneInput().

Fixes a problem with diag lines from libFuzzer being interspersed
with test output.

95bfd65feca95d77a8acb2648a431a1754d1d5d3 authored over 3 years ago by Todd C. Miller <[email protected]>

Use --allow-multiple-definition to work around an issue with ld.lld.

For fuzz_policy we redefine getaddrinfo/freeaddrinfo to work around
a DNS timeout problem with na...

d03805c413d2088e896b01286d59d017efaf6549 authored over 3 years ago by Todd C. Miller <[email protected]>

Do not redefine system group and passwd functions for testsudoers.

Instead, prefix the replacements with "testsudoers_" and use a
custom pwutil backend so they get ...

3e5cf7baa34c378dece04e32fd11fe0147479a47 authored over 3 years ago by Todd C. Miller <[email protected]>

Rename "fuzz" makefile target to "check-fuzzer".

It's purpose is to run the fuzzers are part of a normal "make check"
to avoid bit rot, not to per...

4c182c90f184a581e415276407aab2f27be8c6d9 authored over 3 years ago by Todd C. Miller <[email protected]>

Sudo 1.9.6p1

85d77fb3d90653838e1b79cbe9c28e4fb63d7293 authored over 3 years ago by Todd C. Miller <[email protected]>

plugins: sudoers: policy: add MODE_IMPLIED_SHELL to RUN_VALID_FLAGS

Since this flag isn't set, the sudo_mode variable gets invalidated and
running the 'sudo' comman...

058fde92516633484ac582d49a22defdf42c28cb authored over 3 years ago by Alexandru Ardelean <[email protected]>

fix typo

f57ab1a6384f43995789c6dc2ba5224d1acd725b authored over 3 years ago by Todd C. Miller <[email protected]>

Bug #968

bc32789af2cb8dd079667f06ccfe3af917308e7c authored over 3 years ago by Todd C. Miller <[email protected]>

Move common TLS initialization code to tls_init.c.

71e5275a1c1fa89f0c9254f3d49aa9dc6c1a609e authored over 3 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

843c4b632c00c1a3ff8d1b7e7e0265c64a3c1d4e authored over 3 years ago by Todd C. Miller <[email protected]>

Use HAVE_STDINT_H instead of trying to guess based on __STDC_VERSION__.

Fixes compilation with pre-C99 headers when the compiler supports C99.

d7d80e703fee2f07ecda7a317e72020e2191549c authored over 3 years ago by Todd C. Miller <[email protected]>

Remove compatibility defines for POSIX sys/stat.h macros.

Modern systems have them and we no longer support pre-POSIX systems.
This fixes potential redefin...

d9d450292d6167a167ff420b64e57f2a46a61cf6 authored over 3 years ago by Todd C. Miller <[email protected]>

Quiet a few Solaris Studio compiler warnings.

3f11e8d9a63050bd311fd6cd91817b6568da7b3a authored over 3 years ago by Todd C. Miller <[email protected]>

Add -Wno-unknown-pragmas along with -Wall.

We don't want warnings about unknown pragmas in system headers.

b8e588565b8ecf829e428f18b246121229753509 authored over 3 years ago by Todd C. Miller <[email protected]>

Solaris 11.4 removed /usr/bin/optisa, use /usr/bin/isainfo instead.

42fbc185ab080edf87539df59db441054fbf3035 authored over 3 years ago by Todd C. Miller <[email protected]>

Compare OS name against freebsd* and netbsd* not freebsd and netbsd.

Fixes an issue on NetBSD where host_os starts with netbsdelf.

0e2ba920ee1a1eb15f62d4ae44c4440e7e478e88 authored over 3 years ago by Todd C. Miller <[email protected]>

Add @SUDOERS_LIBS@ to FUZZ_LIBS for -lutil on FreeBSD and NetBSD

07af7caf738fe5537086d6c30222b0e9f8b4abda authored over 3 years ago by Todd C. Miller <[email protected]>

Set locale for all "make check" targets.

0cf7c3a951760178e7e1ab05c93622cd2e061c61 authored over 3 years ago by Todd C. Miller <[email protected]>

AIX 6.1 may have a broken fmemopen().

We only use it for the fuzzers so ignore it for AIX < 7.1.

7bce330ffaf1d0f30d3430fdc91ef0f8967a53db authored over 3 years ago by Todd C. Miller <[email protected]>

Only put specific directories in the ROOT section of the AIX package.

Previously, /usr and /opt were placed in USR and everything else
went in ROOT. Now, only /dev, /...

2b564cd7b212958531ea3977a0394a6ed723a886 authored over 3 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

ce497bf30b178f0e771ede2a24663b70742ff0bb authored over 3 years ago by Todd C. Miller <[email protected]>

Remove unused tls parameter, we now use a per-address tls flag.

1c6080f13589f93bc9308d7bd72c4d7235f71c4c authored over 3 years ago by Todd C. Miller <[email protected]>

Document double escaping of backslashes. Bug #961.

2759920b86508483c44f3a708e2d24dc741ead02 authored over 3 years ago by Todd C. Miller <[email protected]>

No longer need to define _DARWIN_UNLIMITED_GETGROUPS on macOS.

We now define _DARWIN_C_SOURCE which accomplishes the same thing.

06beb6f064ef76b438ee70376a18532e137db6ce authored over 3 years ago by Todd C. Miller <[email protected]>

Fix a potential use-after-free in conversation function.

The prompt passed in to sudo_pam_verify() will be freed later by
check_user_interactive() so we n...

08b0b626f1cc7c0da39195b1a36d7f9a8d90275d authored over 3 years ago by Todd C. Miller <[email protected]>

No need to update cp after storing gr->gr_name, it is not used,

Coverity CID 219314

f0761a98101df91a0449bf481393dd58156570f8 authored over 3 years ago by Todd C. Miller <[email protected]>

Mention GitHub issue #56.

a31bbbfbb6f40843a6c40d33cce9a7ad2667acf8 authored over 3 years ago by Todd C. Miller <[email protected]>

regen

4285153275bb0da4d2d39893b9c1e283bf6eb537 authored over 3 years ago by Todd C. Miller <[email protected]>

Log peer address in sudo_logsrvd JSON-format logs.

The peer that connected to us might not be the same host where the
log entry originated.

d452678787683da6498668cd1f1cbb8000d63178 authored over 3 years ago by Todd C. Miller <[email protected]>

Make "group_source=dynamic" the default on macOS.

Recent versions of macOS do not reliably return all of a user's
non-local groups via getgroups(2)...

5ffa0ce053d7e45b73af4e2bdfaaad317f47f1fd authored over 3 years ago by Todd C. Miller <[email protected]>

For regess/fuzz set LC_ALL to C.UTF-8 if possible, falling back on C.

Works around a crash in leak sanitizer when the locale is set to C
and TLS support is enabled.

9bbf120bd864d8be3187989f92a84367bd70fd95 authored over 3 years ago by Todd C. Miller <[email protected]>

Initialize the lbuf used by sudoers_trace_print() in init_lexer().

Free the old buffer if there is one, otherwise it would never be freed.

ac8f23ef9af4bee2d447c3c1cd72729ba55180d1 authored over 3 years ago by Todd C. Miller <[email protected]>

In sudo_lbuf_destroy(), reset error, len and size.

7f27b04616a41676b5c1d28b1c34961cbec567f2 authored over 3 years ago by Todd C. Miller <[email protected]>

Mention the integer overflow check in store_timespec().

c8a8afba7915950166e5615fe154995997fc2729 authored over 3 years ago by Todd C. Miller <[email protected]>

In find_path() stub only make a copy in outfile if returning FOUND.

Fixed a recently-introduced memory leak in the fuzzer.

4a28b5d587809a0f0bdcc2df858a6cf7b961839a authored over 3 years ago by Todd C. Miller <[email protected]>

Disable debug code for FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION

It will not be used and just confuses the coverage stats.

79dbf9f17edde726b90eaf18cd5eb5dd6140eca7 authored over 3 years ago by Todd C. Miller <[email protected]>

Expand stub getaddrinfo() to resolve "localhost".

0c944576e91cb4534e5a5dd62d76f136166e451a authored over 3 years ago by Todd C. Miller <[email protected]>

Improve fuzz_policy coverage and set defaults in setdefs not parse.

Now exercises session open/close and set additional defaults to
exercise more code paths.

cfcbc42ec77e15fa0e285c91d7a828f3c893d45b authored over 3 years ago by Todd C. Miller <[email protected]>

Improve SUDOERS_NAME_MATCH support.

Now supports digests and performs better directory matching.

f34a3072e5de953142ba09dce44be159b9c0331f authored over 3 years ago by Todd C. Miller <[email protected]>

Add MODE_CHECK to LIST_VALID_FLAGS, fixes "sudo -l command".

f86c11c4a13c8974523b8ee34f9a8450e66481dc authored over 3 years ago by Todd C. Miller <[email protected]>

Split iolog_fileio.c into multiple files.

851247e58c7010485442b06550bee70d5e4812bd authored over 3 years ago by Todd C. Miller <[email protected]>

Correct the integer overflow check in store_timespec().

Fixes oss-fuzz issue #31463

d1cc1c59e8d1ac0dee8e99c5f2f1d7b254bf05a7 authored over 3 years ago by Todd C. Miller <[email protected]>

Update file that was missed in test27 changes.

fc9170d8095253d1de884400bdaffb92576351f2 authored over 3 years ago by Todd C. Miller <[email protected]>

Break out I/O log config handling into iolog_conf.c.

d51d4af7a6150daf9d839a0f54e53ada2833786d authored over 3 years ago by Todd C. Miller <[email protected]>

regen Makefile.in

7144955b078075b3ad414ef35adad6d15696813a authored over 3 years ago by Todd C. Miller <[email protected]>

Add some missing files to the clean target

bdfc07f33085e5e96eb21df7567eabab8eb46738 authored over 3 years ago by Todd C. Miller <[email protected]>

Add netgroup check to sudoers test27

963ea4151e673794807f3f66851b816120901607 authored over 3 years ago by Todd C. Miller <[email protected]>

Sync with fuzz_sudoers changes.

ddb1350b791d8c707d1b0e89016899ac23abd4fd authored over 3 years ago by Todd C. Miller <[email protected]>

Fuzz with runuser and rungroup specified too.

963475a9bc4e32d0abd61c0c49d54c25ba59c853 authored over 3 years ago by Todd C. Miller <[email protected]>

Add test to exercise RunasSpec without a RunasUser.

d160dac35522b54ee5c7591c66cffd0a8d4b5f6c authored over 3 years ago by Todd C. Miller <[email protected]>

Remove unused regress files.

2e0ca52b50bf1528726f6c57c676ce88716ce700 authored over 3 years ago by Todd C. Miller <[email protected]>

Don't try to run getters if we failed to parse the config file.

b3ef60312c9cc80a3602e7b683ad69ec6a7a7d82 authored over 3 years ago by Todd C. Miller <[email protected]>

Add a stub getaddrinfo(3) to avoid a DNS timeout in CIfuzz.

3fc5932be0005531e17ddea1626237a7769b9e0e authored over 3 years ago by Todd C. Miller <[email protected]>

Fix runchroot, runcwd, tty_tickets. Add timestampowner.

8b545e561cb740e4f872a59c512316592013bea1 authored over 3 years ago by Todd C. Miller <[email protected]>

Only add command_info to garbage collector on successful return.

Otherwise it will be freed on failure.

65b598602b4f223aa619fdc8ef2abe3d5e67618c authored over 3 years ago by Todd C. Miller <[email protected]>

Add user millert to group sudo, which is often the exempt group.

3595fd5504a560f2f22be468858e79d3201bd893 authored over 3 years ago by Todd C. Miller <[email protected]>

Add some defaults settings in sudo_file_parse().

We don't have a real policy file but we still want to exercise callbacks
in sudoers.c.

d75db837bdeb03296f24313399f3ea37f6f3773d authored over 3 years ago by Todd C. Miller <[email protected]>

Do not free sudo_user.iolog_{file,path} in sudo_user_free().

They are not dynamically allocated.

48669edd35272fb5fe4eb3741869cc3e8856513d authored over 3 years ago by Todd C. Miller <[email protected]>

Remove unnecessary warnings, we want to fail silently.

80e223b6c87e38a8722ccca97810298a16afb185 authored over 3 years ago by Todd C. Miller <[email protected]>

No longer need to stub out eventlog config functions.

df1b4311107374b7b0ebb1340929f18c61777102 authored over 3 years ago by Todd C. Miller <[email protected]>

Call public getters in logsrvd.conf fuzzer and add to corpus.

Now exercises the syslog config erorr path.

f5d7db56e7a5193674e08f5e5c8ee01916e46a9f authored over 3 years ago by Todd C. Miller <[email protected]>

Add more passes to policy fuzzer

Now execises list, list other user and show_version.

65df01dd71b5da06e5ae3f1fcabb577f96e6cf8c authored over 3 years ago by Todd C. Miller <[email protected]>

Implement sudoers_policy_deregister_hooks()

Register/deregister hooks in fuzz_policy and also call show_version().

b3b80fe6df4583bef9b5e1444fa9800c3ed5bf32 authored over 3 years ago by Todd C. Miller <[email protected]>

Add sudoers debug register/deregister.

e6dc13229fe9510f7f96aaeaf08916e872edcee1 authored over 3 years ago by Todd C. Miller <[email protected]>

Remove unnecessary break statement.

7bafd52fac5fe53e9d459ebeca13cdb4e69e8fd7 authored over 3 years ago by Todd C. Miller <[email protected]>

Include a sha384 digest in the test corpus.

0d04bbdbe2dfe466889964789672581305d5e247 authored over 3 years ago by Todd C. Miller <[email protected]>

Parse sudoers file in the C locale.

ea341e2d34816b2cbb104cb3e5508a3f0858befa authored over 3 years ago by Todd C. Miller <[email protected]>

Add regress test with all current Defaults settings.

Currently skips SELinux and Solaris privilege settings.

24e1774ce322dad53c5f7893b8eafe9ac1f57abc authored over 3 years ago by Todd C. Miller <[email protected]>

Move env hooks into sudoers_hooks.c.

e7b414ce4e8fb2ae9911f0a9fd03c3a661c5e9d6 authored over 3 years ago by Todd C. Miller <[email protected]>

No need to call check_defaults() and check_aliases() in quiet mode.

f82890e5d72afe66d0abf83f0b9ae354ebd99036 authored over 3 years ago by Todd C. Miller <[email protected]>

sudoers_gc_init() is not currently used

b4e86a911f41f2eb7cd466b3704cdb78a50b3530 authored over 3 years ago by Todd C. Miller <[email protected]>

Split fmtsudoers.c into the parts used by sudoers plugin and cvtsudoers.

Only testsudoers and cvtsudoers use the full set of formatting functions.

38c381a0ccc9b1b02552b4177eed56882abd88c4 authored over 3 years ago by Todd C. Miller <[email protected]>

Check defaults settings too.

39e80e47ba747c15dc96afcc69ba8a68ee5eab69 authored over 3 years ago by Todd C. Miller <[email protected]>

Add fuzzer-specific stubs source file.

05767145b36fca735596837b63ef5cdb985dee68 authored over 3 years ago by Todd C. Miller <[email protected]>

Do not overwrite existing ChangeLog file if there is no hg/git dir.

We don't want "make install" from a source tarball to nuke the ChangeLog.

792407fbe587ce480ad44a6caa82d0cfe477a6a8 authored over 3 years ago by Todd C. Miller <[email protected]>

Remove fuzzer targets in "make clean"

1ae4c1bf671fc45dab3b58dec9e135ff74a299cc authored over 3 years ago by Todd C. Miller <[email protected]>

Ignore fuzzer targets

39774e23898d03a9c0a0dd8712dd113399a03b4e authored over 3 years ago by Todd C. Miller <[email protected]>

Set program name in fuzzers so we get consisten warnings.

a3f38fac0c041cf3b4809bf01196735eec2a095e authored over 3 years ago by Todd C. Miller <[email protected]>

Use real eventlog config fuctions instead of stubs.

9d27880af8fb775dd8980cb2df4c18a619f8d84b authored over 3 years ago by Todd C. Miller <[email protected]>

Move iolog info log writing to iolog_loginfo.c

b93aad4e956ef0be590434d226fdfeb11b69efc4 authored over 3 years ago by Todd C. Miller <[email protected]>

Split iolog_util.c into iolog_loginfo.c and iolog_timing.c.

Also rename check_iolog_util -> check_iolog_timing.

a56f7daeea6fb6ddd378d3dbc429bdb80318ab25 authored over 3 years ago by Todd C. Miller <[email protected]>

Move legacy I/O log info file parsing to iolog_legacy.c

2a657e2a12bcf436232116b2f5b542fc2ecc9a79 authored over 3 years ago by Todd C. Miller <[email protected]>

Move eventlog config code into eventlog_conf.c

412858272365f0e6d6f8873e794f64374da8fa06 authored over 3 years ago by Todd C. Miller <[email protected]>

Move eventlog_free() into its own file.

f399c449ad6fc7412588998aa92b52323ef63ee5 authored over 3 years ago by Todd C. Miller <[email protected]>

Stub out eventlog and iolog configuration setters.

dba37768bba9d554d144f8fac37adcd3a7770a2c authored over 3 years ago by Todd C. Miller <[email protected]>

Update Defaults settings after parsing sudoers.

Also stub out dump_defaults when fuzzing as it is not used.

cbd11c44d20045e8475b6d6b823ccbd07740acd0 authored over 3 years ago by Todd C. Miller <[email protected]>

Split base64 encode/decode functions into separate source files.

They are independent functions.

33551acd1fd549ffb37794000fa9ef838c65b715 authored over 3 years ago by Todd C. Miller <[email protected]>

fuzz_printf and fuzz_conversation can be stubs.

f35d9c8be1f53854973662d3100516fca09d578e authored over 3 years ago by Todd C. Miller <[email protected]>

Exercise tilde expansion if used in runcwd or runchroot.

9f5aed70a1d4da3eaf5cd14082cdb552f5e25fa9 authored over 3 years ago by Todd C. Miller <[email protected]>

Move alias checking code out of visudo.c and into check_aliases.c.

c702957879e42f0d1067003b6043c80a6a3ea020 authored over 3 years ago by Todd C. Miller <[email protected]>

Check aliases in fuzz_sudoers if the policy parsed correctly.

2a0ba4008cd7463662f82f2144f144a7015a1988 authored over 3 years ago by Todd C. Miller <[email protected]>

Move alias checking code out of visudo.c and into check_aliases.c.

5a85543c16d27e354e594d9f16a4c0d31d68d6b1 authored over 3 years ago by Todd C. Miller <[email protected]>

We don't need to link fuzz_sudoers with file.c.

c71a3973686af88853219eab1b270fbf61371cb5 authored over 3 years ago by Todd C. Miller <[email protected]>

Strings in dictionary files need to be quoted.

03e610dab52fa6985e42ca10d9b82cbc949e212a authored over 3 years ago by Todd C. Miller <[email protected]>

Add dictionary files for fuzzers where possible.

081e219e23f1f0d9de149625670720424d2a94a1 authored over 3 years ago by Todd C. Miller <[email protected]>

Also free safe_cmnd so it doesn't leak.

e0761b9e3b57783b9ae0c8f74a3c603780d6e3fb authored over 3 years ago by Todd C. Miller <[email protected]>