Commit Graph

659 Commits

Author SHA1 Message Date
Armin Novak
df64d00a97 [warnings,api] fix -Wunused-result
With marking publid API [[nodiscard]] some problematic error checks in
the core library were uncovered. This commit addresses these
shortcomings.
2026-02-17 11:07:08 +01:00
akallabeth
7990eec166 [freerdp] mark all WINPR_ATTR_MALLOC also nodiscard 2026-01-26 13:39:39 +01:00
Armin Novak
01e1f1b595 [crypto] deprecate er and der modules
These are unused and not well tested, mark them deprecated to announce
removal once FreeRDP 4 is released.
2026-01-21 16:41:25 +01:00
akallabeth
fb8efd45f2 [c,format] fix format string and review warnings 2026-01-16 13:36:14 +01:00
akallabeth
09ad4a70cd [c,printf] fix wlog format string to match arguments 2026-01-16 11:42:11 +01:00
akallabeth
2b577b29f6 [c,printf] fix wlog format string to match arguments 2026-01-16 11:42:08 +01:00
akallabeth
fdcb71a956 [c,printf] fix wlog format string to match arguments 2026-01-16 11:42:06 +01:00
akallabeth
c9ed4b055a [c,printf] fix wlog format string to match arguments 2026-01-16 11:42:03 +01:00
akallabeth
49034a8d28 [c,printf] fix wlog format string to match arguments 2026-01-16 11:42:01 +01:00
akallabeth
974b65c371 [c,printf] fix wlog format string to match arguments 2026-01-16 11:41:58 +01:00
akallabeth
011737296d [crypto,base64] do proper length checks
relying on casting is error prone, so do proper index range checks.
2026-01-10 10:23:12 +01:00
akallabeth
62a9e787ed [crypto,base64] ensure char is singend 2026-01-10 09:02:02 +01:00
akallabeth
cb53de0733 [crypto,tls] fix freerdp_tls_connect_ex return values 2026-01-09 09:24:29 +01:00
Armin Novak
164dfef442 [warnings] fix signed/unsigned compare warnings 2026-01-09 09:24:19 +01:00
Armin Novak
f8ac8fb7b6 [c,warnings] fix unterminated string warnings
initialize variables as array to avoid warnings with gcc >= 15 or clang
2026-01-08 11:32:47 +01:00
Armin Novak
361d0e80f8 [clang,warnings] fix Wjump-misses-init 2026-01-08 11:32:41 +01:00
Armin Novak
7ba7501777 [clang,warnings] fix Wjump-misses-init 2026-01-08 11:32:41 +01:00
Armin Novak
8343f0596f [clang,warnings] fix Wjump-misses-init 2026-01-08 11:32:41 +01:00
Armin Novak
2d3cb653ce [clang,warnings] fix Wjump-misses-init 2026-01-08 11:32:41 +01:00
Armin Novak
4a2262d52a [clang,warnings] fix Wjump-misses-init 2026-01-08 11:32:41 +01:00
Armin Novak
f7478f906c [clang,warnings] fix Wjump-misses-init 2026-01-08 11:32:41 +01:00
akallabeth
a0b21f992a Merge pull request #12072 from akallabeth/cert-data-checks
[crypto,certificate_data] add some hostname sanitation
2025-12-14 09:32:24 +01:00
akallabeth
83d96a81f3 [crypto,certificate_data] add some hostname sanitation 2025-12-13 17:29:09 +01:00
akallabeth
b160ea80e8 [mingw] fix type incompatibilities
The integer types with MINGW do not always match. Ensure the correct
32bit interger base type is used when passing pointers
2025-12-12 19:09:30 +01:00
akallabeth
3666b91981 [crypto,certificate] sanitize hostnames
When creating a local certificate file ensure the hostname does not
contain invalid characters.
2025-12-09 08:32:42 +01:00
akallabeth
6c0a302083 [core,gateway] improve arm transport 2025-10-28 11:57:27 +01:00
Richard Markiewicz
5066253685 [crypto,x509] set comparison function for sk_ASN1_OBJECT_find in EKU check 2025-10-28 11:57:25 +01:00
akallabeth
4486b1a492 [crypto,tls] make cert warning more accurate 2025-10-20 18:30:20 +02:00
Olivier Blin
7855417c10 [crypto,x509] add missing OpenSSL include for d2i_RSA_PSS_PARAMS 2025-10-17 14:59:07 +02:00
akallabeth
74648eb3a9 [c,standard] use C99 inline 2025-09-26 11:29:26 +02:00
Armin Novak
6cfdf9e43e [json] use WINPR_JSON_GetObjectItemCaseSensitive
Prefer usage of case sensitive functions that are faster.
2025-09-23 12:38:23 +02:00
Armin Novak
7e6de56338 [core,gateway] automatically accept ARM redirection
When using ARM gateway transport auto accept the certificate provided
by server response.
2025-09-17 15:20:31 +02:00
akallabeth
8b9335aa90 [CMake,libfreerdp] add pkg-config dependencies 2025-09-11 07:17:42 +02:00
akallabeth
aa6062e014 [crypto,tls] fix object size warnings
As sane limit for strings for BIO_puts set INT_MAX. On systems where
SIZE_MAX is smaller, replace it with SIZE_MAX
2025-09-01 09:03:07 +02:00
Armin Novak
124e2adafe [warnings] fix type mismatches 2025-08-18 14:32:29 +02:00
Armin Novak
96bc120213 [crypto,tls] set server certificate chain 2025-08-18 13:39:43 +02:00
Ofir Matasas
5ee98aab3f Add extract_chain_from_pem function for getting cert chain 2025-08-18 13:39:40 +02:00
akallabeth
66ed6d74ac [crypto,tls] do not use context->settings->instance 2025-07-18 13:48:43 +02:00
Armin Novak
daeec1f98d [crypto,tls] pring big warning for /cert:ignore 2025-06-25 09:26:41 +02:00
akallabeth
da05b25f3b [WaitForXXObject] use infinite timeout where possible 2025-06-03 17:07:31 +02:00
akallabeth
ef29389647 [crypto,tls] use new JSON config file helpers 2025-05-26 19:36:40 +02:00
akallabeth
ec42fd986a [crypto,key] use EVP_aes_256_xts
This mode is supported by all OpenSSL and libressl >= 2.9.1 versions.
2025-04-29 10:50:03 +02:00
Armin Novak
549ba56233 [crypto,key] eliminate dead code 2025-04-23 10:13:36 +02:00
akallabeth
2fb2e5f9c5 [crypto,key] add function to export PEM and create a key
* freerdp_key_generate creates a new key
* freerdp_key_get_pem exports the key as PEM
2025-04-22 12:00:40 +02:00
Armin Novak
88a3c94adc [crypto,certificate] Add a fallback for weak RSA keys
X509_dup fails with weak RSA keys. RDP security does still use them, so
add a fallback to recreate the X509 from the raw RSA data.
2025-04-15 16:30:29 +02:00
Richard Markiewicz
68f8c17b53 [core,tls] enable SNI when building with libreSSL 2025-04-01 08:48:11 -04:00
Armin Novak
c79f080e8d [warnings] improve array bound checks 2025-03-12 15:04:38 +01:00
akallabeth
1a5ba989e8 [warnings] fixed integer casts 2025-03-11 17:23:58 +01:00
Michael Tokarev
19f129654e spelling: dont 2025-03-06 13:24:29 +03:00
akallabeth
d4f7fb081b [warnings] fix -Wunused-function
* delete unused functions that are no longer required
* define guard functions only used while debugging
2025-02-27 19:29:46 +01:00