summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2016-10-29Tidying: coverity issuesJeremy Harris
2016-10-29Fix dns authority-name lookupJeremy Harris
2016-10-29constificationJeremy Harris
2016-10-29tidyingJeremy Harris
2016-10-25TFO: use IPPROTO_TCP not SOL_TCL for setsockopt, being present on more platformsJeremy Harris
Also downgrade errors from panic-log to debug
2016-10-23Update README.UPDATING; fix typos in ChangeLog/NewStuffPhil Pennock
2016-10-23TFO: feature advertisementexim-4_88_RC3Jeremy Harris
2016-10-23Fix bug with aborted server TLS connection, under GnuTLSJeremy Harris
Longstanding, but exposed by 60d10ce
2016-10-22TFO: Support compilation on systems which define TCP_FASTOPEN but not ↵Jeremy Harris
MSG_FASTOPEN RHEL 7.0 does that, oddly
2016-10-22tidyingJeremy Harris
2016-10-22TCP Fast OpenJeremy Harris
2016-10-21Expansions: errorcheck use of crypt() in the open-coded version of ↵Jeremy Harris
crypteq/crypt16 Previously, bad arguments crashed under OpenBSD
2016-10-20tidyingJeremy Harris
2016-10-18Unbreak build: crypto hdrs not in system includesPhil Pennock
If using pkg-config to get the paths for various packages and the crypto library headers are not in the system headers, then the hash work broke the Exim build by requiring the CFLAGS manipulation for _all_ builds, not just the TLS libraries. Shows up on MacOS where there's a system OpenSSL but not system OpenSSL headers (because only SecureTransport is supported) and using brew-installed OpenSSL. I've also coded the fix for GnuTLS on the same basis, but that's untested. Fixes bug 1906
2016-10-18Avoid pure-ACK TCP segments during command phaseJeremy Harris
2016-10-16Tidying: coverity issuesJeremy Harris
2016-10-16Fix sender-verify callout to not use trigger-message SIZEJeremy Harris
Broken-by: 9094b84b4cce
2016-10-16Tidying: coverity issuesJeremy Harris
2016-10-16Queuefile: avoid using buffered I/O - no point for a block-copyJeremy Harris
and it meant (an admittedly ingnorable) Coverity whine about a FILE leak Take the oppurtunity to constify a utility function
2016-10-15Include 'Configure owner' in -bV outputHeiko Schlittermann (HS12-RIPE)
2016-10-15tidyingJeremy Harris
2016-10-15Queuefile: refactorJeremy Harris
2016-10-15New: queuefile transport, under EXPERIMENTAL_QUEUEFILEAndrew Colin Kissa
2016-10-10Lazy-create builtin macrosJeremy Harris
By only filling out the internal macro representation for the builtin macros when a config line includes an underscore followed by a letter which might be one we should save startup effort on configs which never use a builtin.
2016-10-10Fix check for commandline macro definitionJeremy Harris
Without this, mailq (done by unpriv user) and daemon SIGHUP handling fail Broken-by: c0b9d3e87264
2016-10-08DH parameters update, new values & defaultexim-4_88_RC2Phil Pennock
* Add three new Exim-specific DH parameter constants; state provenance, but no way for others to verify; this is a signed commit, which is about as much as we can do for the truly paranoid: provide an audit trail. * Add the RFC 7919 DH primes + No TLS feature negotiation, per 7919, but the DH primes can be used if folks so choose * Fixed broken format string in util/gen_pkcs3.c * Tried to make gen_pkcs3.c support q values. + Turns out, q doesn't affect the PEM and that's not a mistake in my initialisation; I've checked with a cryptographer, we're losing some server-side optimizations but not any security properties for our scenario. Fixes: 1895
2016-10-08Fix callouts connection fallback from TLS to cleartext. Bug 1897Jeremy Harris
2016-10-02Close logfile after a while waiting for non-smtp input. Bug 1891Jeremy Harris
2016-10-02Avoid parsing cost for auto-macro createsJeremy Harris
2016-10-02Logging: connection_reject log selector should apply also to the connect aclJeremy Harris
2016-09-30Fix mime ACL filename decodeJeremy Harris
A latent bug (uninitialised memory referred to by $mime_decoded_filename) uncovered by 40c90bca9f7e
2016-09-29Fix checking for -D option useJeremy Harris
Broken-by: c0b9d3e87264
2016-09-29Feature macros should be uppercaseJeremy Harris
2016-09-29Debug: fix openssl tls_close() debug outputJeremy Harris
2016-09-28Refactor driver feature-macro generation to be driven by existing tablesJeremy Harris
Would like to do lookup drivers too but unsure about dyn-linked variants
2016-09-28Default to filesystem space/inode checking enabledJeremy Harris
2016-09-28Drain socket to get clean TCP FINsJeremy Harris
2016-09-25Add automatic macros for config-file options. Bug 1819Jeremy Harris
2016-09-24Delivery: fix memory leakJeremy Harris
2016-09-22Defend against symlink attack by another process running as eximJeremy Harris
Reported-by: http://www.halfdog.net/Security/2016/DebianEximSpoolLocalRoot/
2016-09-22Routing: avoid doing the one_time replacement operation when a redirect ↵Jeremy Harris
leaves the address unchanged When done, in combination with a defer the retry would see the address as delivered, hence losing mail.
2016-09-22Routing: for efficiency, avoid complexifying the "condition" string until ↵Jeremy Harris
the second is read from config
2016-09-18ACL: merge the tables used for codition/modifier decodeJeremy Harris
2016-09-18 ACL: bsearch for controlsJeremy Harris
2016-09-17tidyingJeremy Harris
2016-09-14Logging: fix errno decodesJeremy Harris
2016-09-13Auth: fix error check in CRAM-MD5Jeremy Harris
2016-09-13tidyingJeremy Harris
2016-09-11Log EHLO response on getting conn-close response for HELO. Bug 1832Jeremy Harris
2016-09-11Reduce space used by flags in smtp transportJeremy Harris
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-26 04:22:41 +0000