strongswan/src/libcharon/sa
Tobias Brunner 958c0e8e5c ike-sa-manager: Avoid memory leak if IKE_SAs get checked in after flush() was called
A thread might check out a new IKE_SA via checkout_new() or
checkout_by_config() and start initiating it while the daemon is
terminating and the IKE_SA manager is flushed by the main thread.
That SA is not tracked yet so the main thread is not waiting for it and
the other thread is able to check it in and creating an entry after flush()
already terminated causing a memory leak.

Fixes #1348.
2016-03-23 14:02:23 +01:00
..
eap plugin-feature: Add vendor specific EAP method registration macros 2015-08-17 11:28:08 +02:00
ikev1 credential-manager: Make online revocation checks optional for public key enumerator 2016-03-10 11:07:14 +01:00
ikev2 ikev2: Delay online revocation checks during make-before-break reauthentication 2016-03-10 11:07:15 +01:00
xauth uclibc only defines strndup(3) if _GNU_SOURCE is defined 2014-02-19 16:11:47 +01:00
authenticator.c ikev2: Remove private AUTH_BLISS method 2015-03-04 13:54:09 +01:00
authenticator.h ikev2: Remove private AUTH_BLISS method 2015-03-04 13:54:09 +01:00
child_sa.c libhydra: Move kernel interface to libcharon 2016-03-03 17:36:11 +01:00
child_sa.h child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAs 2015-03-25 12:00:20 +01:00
child_sa_manager.c child-sa-manager: Add a global manager storing CHILD_SA relations 2015-02-20 13:34:49 +01:00
child_sa_manager.h child-sa-manager: Add a global manager storing CHILD_SA relations 2015-02-20 13:34:49 +01:00
ike_sa.c ike-sa: Improve interaction between flush_auth_cfg and delayed revocation checks 2016-03-10 11:07:15 +01:00
ike_sa.h ike-sa: Add condition to suspend online certificate revocation checks for an IKE_SA 2016-03-10 11:07:14 +01:00
ike_sa_id.c ikev2: Compare initiator flag again, partially reverts 17ec1c74de 2015-08-20 16:58:09 +02:00
ike_sa_id.h Fix various API doc issues and typos 2013-07-18 18:30:36 +02:00
ike_sa_manager.c ike-sa-manager: Avoid memory leak if IKE_SAs get checked in after flush() was called 2016-03-23 14:02:23 +01:00
ike_sa_manager.h ike-sa-manager: Allow plugins to provide IKE SPIs via a callback 2015-11-11 15:39:45 +01:00
keymat.c ike: Define keylength for aescmac algorithm 2013-10-11 10:15:21 +02:00
keymat.h Fix various API doc issues and typos 2013-07-18 18:30:36 +02:00
redirect_manager.c redirect-manager: Add helper function to create and parse REDIRECT notify data 2016-03-04 16:02:58 +01:00
redirect_manager.h Fix some Doxygen issues 2016-03-11 12:25:14 +01:00
redirect_provider.h redirect-provider: Add interface to redirect clients during initial messages 2016-03-04 16:02:57 +01:00
shunt_manager.c libhydra: Move kernel interface to libcharon 2016-03-03 17:36:11 +01:00
shunt_manager.h shunt-manager: Add flush() method to properly uninstall shunts 2015-07-27 13:51:10 +02:00
task.c ikev2: Add task that verifies a peer's certificate 2016-03-10 11:07:15 +01:00
task.h ikev2: Add task that verifies a peer's certificate 2016-03-10 11:07:15 +01:00
task_manager.c Don't invoke child_updown hook twice as responder 2012-04-11 17:45:12 +02:00
task_manager.h ike_sa: Defer task manager destruction after child destruction 2014-01-16 14:16:13 +01:00
trap_manager.c libhydra: Move kernel interface to libcharon 2016-03-03 17:36:11 +01:00
trap_manager.h Reuse reqid for trap policies installed for dpd|closeaction=hold 2013-07-01 09:58:25 +02:00