1. 19 Feb, 2015 1 commit
  2. 18 Feb, 2015 3 commits
  3. 16 Feb, 2015 1 commit
  4. 12 Feb, 2015 1 commit
  5. 11 Feb, 2015 1 commit
  6. 04 Feb, 2015 2 commits
  7. 24 Nov, 2014 2 commits
  8. 10 Nov, 2014 1 commit
  9. 06 Nov, 2014 1 commit
  10. 29 Oct, 2014 1 commit
  11. 28 Oct, 2014 1 commit
  12. 13 Oct, 2014 2 commits
  13. 06 Oct, 2014 3 commits
  14. 01 Oct, 2014 1 commit
  15. 25 Sep, 2014 2 commits
  16. 24 Sep, 2014 1 commit
  17. 15 Sep, 2014 1 commit
    • Alban Crequy's avatar
      config: add new limit: pending_fd_timeout · bbf11cd5
      Alban Crequy authored
      This is one of four commits needed to address CVE-2014-3637.
      
      When a file descriptor is passed to dbus-daemon, the associated D-Bus message
      might not be fully sent to dbus-daemon yet. Dbus-daemon keeps the file
      descriptor in the DBusMessageLoader of the connection, waiting for the rest of
      the message. If the client stops sending the remaining bytes, dbus-daemon will
      wait forever and keep that file descriptor.
      
      This patch adds pending_fd_timeout (milliseconds) in the configuration to
      disconnect a connection after a timeout when a file descriptor was sent but not
      the remaining message.
      
      Bug: https://bugs.freedesktop.org/show_bug.cgi?id=80559Reviewed-by: default avatarSimon McVittie <simon.mcvittie@collabora.co.uk>
      bbf11cd5
  18. 04 Sep, 2014 1 commit
  19. 13 Mar, 2014 1 commit
  20. 20 Jan, 2014 2 commits
  21. 17 Jan, 2014 2 commits
  22. 06 Jan, 2014 5 commits
  23. 02 Dec, 2013 1 commit
  24. 27 Nov, 2013 2 commits
  25. 01 Nov, 2013 1 commit