Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/crypto/external/cpl/trousers/dist * TROUSERS_0_3_14



details:   https://anonhg.NetBSD.org/src/rev/417343e082a7
branches:  trunk
changeset: 447310:417343e082a7
user:      christos <christos%NetBSD.org@localhost>
date:      Mon Jan 07 14:57:23 2019 +0000

description:
* TROUSERS_0_3_14
- Changes to support OpenSSL 1.1.0
- Removed some warnings for proper builds
- Changes to allow building on OS X
- Fixed memory leaks
- Fixed failure to recognize connections from localhost over IPv6
- Fixed for an exploitable local denial of service in tcsd

* TROUSERS_0_3_13
- Changed exported functions which had a name too common, to avoid collision
- Assessed daemon security using manual techniques and coverit
- Fixed major security bugs and memory leaks
- Added debug support to run tcsd with a different user/group
- Daemon now properly closes sockets before shutting down

* TROUSERS_0_3_12
- Added new network code for RPC, which supports IPv6
- Users of client applications can configure the hostname of the tcsd server
they want to connect through the TSS_TCSD_HOSTNAME env var (only works if
application didn't set a hostname in the context)
- Added disable_ipv4 and disable_ipv6 config options for server

* TROUSERS_0_3_11
- Fix build process for distros
- License was changed from GPL to BSD
- Many bugfixes
- updated man pages

diffstat:

 crypto/external/cpl/trousers/dist/.gitignore                                       |    32 +
 crypto/external/cpl/trousers/dist/.pc/.version                                     |     1 +
 crypto/external/cpl/trousers/dist/AUTHORS                                          |     5 +-
 crypto/external/cpl/trousers/dist/ChangeLog                                        |    28 +
 crypto/external/cpl/trousers/dist/LICENSE                                          |    96 +-
 crypto/external/cpl/trousers/dist/Makefile.am                                      |     2 +-
 crypto/external/cpl/trousers/dist/Makefile.in                                      |    10 +-
 crypto/external/cpl/trousers/dist/README                                           |     4 +-
 crypto/external/cpl/trousers/dist/aclocal.m4                                       |    85 +-
 crypto/external/cpl/trousers/dist/bootstrap.sh                                     |     5 +
 crypto/external/cpl/trousers/dist/configure                                        |  6661 ++++++---
 crypto/external/cpl/trousers/dist/configure.ac                                     |   412 +
 crypto/external/cpl/trousers/dist/dist/Makefile.am                                 |    11 +-
 crypto/external/cpl/trousers/dist/dist/Makefile.in                                 |    25 +-
 crypto/external/cpl/trousers/dist/dist/fedora/trousers.fc                          |     4 +
 crypto/external/cpl/trousers/dist/dist/fedora/trousers.spec.in                     |     2 +-
 crypto/external/cpl/trousers/dist/dist/fedora/trousers.te                          |    33 +
 crypto/external/cpl/trousers/dist/dist/tcsd.conf.in                                |    21 +
 crypto/external/cpl/trousers/dist/dist/trousers.spec.in                            |     2 +-
 crypto/external/cpl/trousers/dist/ltmain.sh                                        |    33 +-
 crypto/external/cpl/trousers/dist/man/Makefile.in                                  |     6 +-
 crypto/external/cpl/trousers/dist/man/man3/Makefile.am                             |    24 +-
 crypto/external/cpl/trousers/dist/man/man3/Makefile.in                             |   148 +-
 crypto/external/cpl/trousers/dist/man/man3/Tspi_Hash_GetHashValue.3                |     2 +-
 crypto/external/cpl/trousers/dist/man/man3/Tspi_Hash_SetHashValue.3                |     2 +-
 crypto/external/cpl/trousers/dist/man/man3/Tspi_Hash_Sign.3                        |     4 +-
 crypto/external/cpl/trousers/dist/man/man3/Tspi_Hash_VerifySignature.3             |     2 +-
 crypto/external/cpl/trousers/dist/man/man3/Tspi_TPM_PcrExtend.3                    |     3 +-
 crypto/external/cpl/trousers/dist/man/man3/Tspi_TPM_Quote2.3                       |   100 +
 crypto/external/cpl/trousers/dist/man/man5/Makefile.in                             |     6 +-
 crypto/external/cpl/trousers/dist/man/man8/Makefile.in                             |     6 +-
 crypto/external/cpl/trousers/dist/man/man8/tcsd.8.in                               |    23 +-
 crypto/external/cpl/trousers/dist/src/Makefile.in                                  |     6 +-
 crypto/external/cpl/trousers/dist/src/include/Makefile.am                          |     2 +-
 crypto/external/cpl/trousers/dist/src/include/Makefile.in                          |     8 +-
 crypto/external/cpl/trousers/dist/src/include/daa/anonymity_revocation.h           |    62 +
 crypto/external/cpl/trousers/dist/src/include/daa/bi.h                             |   380 +
 crypto/external/cpl/trousers/dist/src/include/daa/bi_gmp.h                         |   295 +
 crypto/external/cpl/trousers/dist/src/include/daa/bi_openssl.h                     |   352 +
 crypto/external/cpl/trousers/dist/src/include/daa/daa_parameter.h                  |    87 +
 crypto/external/cpl/trousers/dist/src/include/daa/daa_structs.h                    |   385 +
 crypto/external/cpl/trousers/dist/src/include/daa/issuer.h                         |    71 +
 crypto/external/cpl/trousers/dist/src/include/daa/key_correct.h                    |    31 +
 crypto/external/cpl/trousers/dist/src/include/daa/list.h                           |    40 +
 crypto/external/cpl/trousers/dist/src/include/daa/platform.h                       |   115 +
 crypto/external/cpl/trousers/dist/src/include/daa/verifier.h                       |   110 +
 crypto/external/cpl/trousers/dist/src/include/hosttable.h                          |     1 -
 crypto/external/cpl/trousers/dist/src/include/obj_context.h                        |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_daa.h                            |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_daaarakey.h                      |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_daacred.h                        |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_daaissuerkey.h                   |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_delfamily.h                      |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_encdata.h                        |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_hash.h                           |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_migdata.h                        |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_nv.h                             |    17 +-
 crypto/external/cpl/trousers/dist/src/include/obj_pcrs.h                           |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_policy.h                         |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_rsakey.h                         |     2 +-
 crypto/external/cpl/trousers/dist/src/include/obj_tpm.h                            |     2 +-
 crypto/external/cpl/trousers/dist/src/include/portable_endian.h                    |   115 +
 crypto/external/cpl/trousers/dist/src/include/rpc_tcstp.h                          |     3 +-
 crypto/external/cpl/trousers/dist/src/include/rpc_tcstp_tcs.h                      |     4 +-
 crypto/external/cpl/trousers/dist/src/include/rpc_tcstp_tsp.h                      |     4 +-
 crypto/external/cpl/trousers/dist/src/include/spi_utils.h                          |     7 +
 crypto/external/cpl/trousers/dist/src/include/tcs_tsp.h                            |     5 +
 crypto/external/cpl/trousers/dist/src/include/tcs_utils.h                          |     5 -
 crypto/external/cpl/trousers/dist/src/include/tcslog.h                             |     7 +
 crypto/external/cpl/trousers/dist/src/include/tsp_tcsi_param.h                     |    27 +
 crypto/external/cpl/trousers/dist/src/include/tss/TSP.idl                          |   762 +
 crypto/external/cpl/trousers/dist/src/include/tss/tpm.h                            |     4 +
 crypto/external/cpl/trousers/dist/src/tcs/Makefile.am                              |     2 +-
 crypto/external/cpl/trousers/dist/src/tcs/Makefile.in                              |  1077 +-
 crypto/external/cpl/trousers/dist/src/tcs/crypto/openssl/crypto.c                  |    13 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_admin.c                    |    40 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_aik.c                      |    15 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_audit.c                    |    15 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_auth.c                     |    10 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_bind.c                     |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_caps.c                     |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_caps_tpm.c                 |    15 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_certify.c                  |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_changeauth.c               |    10 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_cmk.c                      |    30 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_context.c                  |     2 +
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_counter.c                  |    25 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_daa.c                      |    10 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_delegate.c                 |    40 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_dir.c                      |    10 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_ek.c                       |    25 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_evlog.c                    |    22 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_key.c                      |    44 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_maint.c                    |    25 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_migration.c                |    15 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_nv.c                       |    47 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_oper.c                     |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_own.c                      |    10 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_pcr_extend.c               |    15 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_ps.c                       |    37 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_quote.c                    |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_quote2.c                   |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_random.c                   |    10 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_seal.c                     |    10 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_selftest.c                 |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_sign.c                     |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_tick.c                     |     5 +-
 crypto/external/cpl/trousers/dist/src/tcs/rpc/tcstp/rpc_transport.c                |    15 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcs_aik.c                                |     1 +
 crypto/external/cpl/trousers/dist/src/tcs/tcs_context.c                            |     7 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcs_context_key.c                        |     2 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcs_evlog_biosem.c                       |     2 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcs_evlog_imaem.c                        |    76 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcs_key_mem_cache.c                      |    18 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcs_pbg.c                                |    22 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcs_utils.c                              |     6 -
 crypto/external/cpl/trousers/dist/src/tcs/tcsi_caps_tpm.c                          |     6 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcsi_evlog.c                             |    11 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcsi_nv.c                                |    17 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcsi_ps.c                                |    30 +-
 crypto/external/cpl/trousers/dist/src/tcs/tcsi_transport.c                         |     2 +-
 crypto/external/cpl/trousers/dist/src/tcsd/Makefile.am                             |     4 +-
 crypto/external/cpl/trousers/dist/src/tcsd/Makefile.in                             |    30 +-
 crypto/external/cpl/trousers/dist/src/tddl/Makefile.am                             |     2 +-
 crypto/external/cpl/trousers/dist/src/tddl/Makefile.in                             |    27 +-
 crypto/external/cpl/trousers/dist/src/trspi/Makefile.in                            |    98 +-
 crypto/external/cpl/trousers/dist/src/trspi/crypto/Makefile.am                     |     1 +
 crypto/external/cpl/trousers/dist/src/trspi/crypto/openssl/hash.c                  |    15 +-
 crypto/external/cpl/trousers/dist/src/trspi/crypto/openssl/rsa.c                   |    64 +-
 crypto/external/cpl/trousers/dist/src/trspi/crypto/openssl/symmetric.c             |    53 +-
 crypto/external/cpl/trousers/dist/src/trspi/trousers.c                             |     7 +-
 crypto/external/cpl/trousers/dist/src/tspi/Makefile.am                             |     3 +-
 crypto/external/cpl/trousers/dist/src/tspi/Makefile.in                             |  1240 +-
 crypto/external/cpl/trousers/dist/src/tspi/daa/Makefile.am                         |    31 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/big_integer/test/Makefile.am        |     9 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/big_integer/test/multi_exp.c        |    29 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/big_integer/test/test.c             |   296 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_debug.c                         |   294 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_debug.h                         |    66 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_issuer/issue_credential.c       |    68 +-
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_issuer/issuer_setup.c           |   166 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_issuer/key_correctness_proof.c  |    26 +-
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_issuer/key_verification.c       |   147 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_platform/platform.c             |    43 +-
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_platform/test.c                 |   142 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_platform/test_join.c            |   505 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_structs.c                       |    44 +-
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_verifier/test/Makefile.am       |     7 +
 crypto/external/cpl/trousers/dist/src/tspi/daa/daa_verifier/verifier_transaction.c |   102 +-
 crypto/external/cpl/trousers/dist/src/tspi/daa/test_sign.c                         |   241 +
 crypto/external/cpl/trousers/dist/src/tspi/gtk/callbacks.h                         |    58 +
 crypto/external/cpl/trousers/dist/src/tspi/gtk/interface.h                         |    30 +
 crypto/external/cpl/trousers/dist/src/tspi/gtk/main.c                              |     4 +-
 crypto/external/cpl/trousers/dist/src/tspi/gtk/support.h                           |    81 +
 crypto/external/cpl/trousers/dist/src/tspi/log.c                                   |     5 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj.c                                   |     4 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_context.c                           |    58 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_daa.c                               |   151 +
 crypto/external/cpl/trousers/dist/src/tspi/obj_delfamily.c                         |     8 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_encdata.c                           |     9 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_migdata.c                           |     6 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_nv.c                                |    17 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_pcrs.c                              |    31 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_policy.c                            |     6 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_rsakey.c                            |    10 +-
 crypto/external/cpl/trousers/dist/src/tspi/obj_tpm.c                               |     4 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/hosttable.c                         |    50 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc.c                         |   127 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_admin.c                   |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_audit.c                   |     3 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_certify.c                 |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_cmk.c                     |     7 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_delegate.c                |    11 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_migration.c               |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_nv.c                      |    14 -
 crypto/external/cpl/trousers/dist/src/tspi/rpc/tcstp/rpc_transport.c               |     4 +-
 crypto/external/cpl/trousers/dist/src/tspi/ssl_ui.c                                |     3 +-
 crypto/external/cpl/trousers/dist/src/tspi/tsp_auth.c                              |    12 +-
 crypto/external/cpl/trousers/dist/src/tspi/tsp_caps.c                              |     2 +
 crypto/external/cpl/trousers/dist/src/tspi/tsp_context_mem.c                       |     7 +
 crypto/external/cpl/trousers/dist/src/tspi/tsp_daa.c                               |     4 +-
 crypto/external/cpl/trousers/dist/src/tspi/tsp_delegate.c                          |    10 +-
 crypto/external/cpl/trousers/dist/src/tspi/tsp_pcr.c                               |     4 +-
 crypto/external/cpl/trousers/dist/src/tspi/tsp_policy.c                            |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/tsp_ps.c                                |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/tsp_tcsi_param.c                        |   168 +
 crypto/external/cpl/trousers/dist/src/tspi/tsp_transport.c                         |    88 +
 crypto/external/cpl/trousers/dist/src/tspi/tspi_admin.c                            |    18 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_aik.c                              |     9 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_audit.c                            |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_certify.c                          |    28 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_changeauth.c                       |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_cmk.c                              |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_context.c                          |    22 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_dir.c                              |     2 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_ek.c                               |    14 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_key.c                              |    29 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_maint.c                            |     1 -
 crypto/external/cpl/trousers/dist/src/tspi/tspi_migration.c                        |     8 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_nv.c                               |    18 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_ps.c                               |    10 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_quote.c                            |    10 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_quote2.c                           |     6 +-
 crypto/external/cpl/trousers/dist/src/tspi/tspi_selftest.c                         |     2 +-
 204 files changed, 13133 insertions(+), 4379 deletions(-)

diffs (truncated from 28158 to 300 lines):

diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/.gitignore
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/crypto/external/cpl/trousers/dist/.gitignore      Mon Jan 07 14:57:23 2019 +0000
@@ -0,0 +1,32 @@
+*.deps
+*.o
+*.la
+*.libs
+*.lo
+*.a
+*.spec
+*~
+*Makefile
+*Makefile.in
+/.pc
+/ltmain.sh
+/aclocal.m4
+/autom4te.cache
+/config.guess
+/config.log
+/config.status
+/config.sub
+/configure
+/depcomp
+/install-sh
+/libtool
+/missing
+/dist/tcsd.conf
+/man/man5/*.5
+/man/man8/*.8
+/src/tcsd/tcsd
+/tools/ps_convert
+/tools/ps_inspect
+cscope.out
+tags
+compile
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/.pc/.version
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/crypto/external/cpl/trousers/dist/.pc/.version    Mon Jan 07 14:57:23 2019 +0000
@@ -0,0 +1,1 @@
+2
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/AUTHORS
--- a/crypto/external/cpl/trousers/dist/AUTHORS Mon Jan 07 14:08:02 2019 +0000
+++ b/crypto/external/cpl/trousers/dist/AUTHORS Mon Jan 07 14:57:23 2019 +0000
@@ -4,9 +4,9 @@
 The TSS code was originally written for WIN32 by Ryan Catherman and ported to
 Linux initially by Seiji Munetoh and Taiga Nakamura as well as Ryan.
 
-The code has since been modified by Seiji Munetoh and Kent Yoder.
+The code has since been modified by Seiji Munetoh, Kent Yoder and Richard Maciel.
 
-The code is currently maintained by Kent Yoder <shpedoikal%gmail.com@localhost>.
+The code is currently maintained by Hon Ching(Vicky) Lo <honclo%linux.vnet.ibm.com@localhost>
 
 The manpages were originally written by Megan Schneider and Kathy Robertson
 and have been modified by Kent Yoder.
@@ -16,6 +16,7 @@
 Loulwa Salem
 Ramon Brandao
 Klaus Kiwi
+Kent Yoder
 
 Specifically the NVRAM implementation:
 James Xu
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/ChangeLog
--- a/crypto/external/cpl/trousers/dist/ChangeLog       Mon Jan 07 14:08:02 2019 +0000
+++ b/crypto/external/cpl/trousers/dist/ChangeLog       Mon Jan 07 14:57:23 2019 +0000
@@ -1,3 +1,31 @@
+* TROUSERS_0_3_14
+- Changes to support OpenSSL 1.1.0
+- Removed some warnings for proper builds
+- Changes to allow building on OS X
+- Fixed memory leaks
+- Fixed failure to recognize connections from localhost over IPv6
+- Fixed for an exploitable local denial of service in tcsd
+
+* TROUSERS_0_3_13
+- Changed exported functions which had a name too common, to avoid collision
+- Assessed daemon security using manual techniques and coverit
+- Fixed major security bugs and memory leaks
+- Added debug support to run tcsd with a different user/group
+- Daemon now properly closes sockets before shutting down
+
+* TROUSERS_0_3_12
+- Added new network code for RPC, which supports IPv6
+- Users of client applications can configure the hostname of the tcsd server
+they want to connect through the TSS_TCSD_HOSTNAME env var (only works if
+application didn't set a hostname in the context)
+- Added disable_ipv4 and disable_ipv6 config options for server
+
+* TROUSERS_0_3_11
+- Fix build process for distros
+- License was changed from GPL to BSD
+- Many bugfixes
+- updated man pages
+
 * TROUSERS_0_3_8
 
 - Fix ssl_ui.c overflow
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/LICENSE
--- a/crypto/external/cpl/trousers/dist/LICENSE Mon Jan 07 14:08:02 2019 +0000
+++ b/crypto/external/cpl/trousers/dist/LICENSE Mon Jan 07 14:57:23 2019 +0000
@@ -1,87 +1,15 @@
-
-THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS COMMON PUBLIC LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION OF THE PROGRAM CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS 
AGREEMENT.
-
-1. DEFINITIONS
-
-"Contribution" means:
-
-    a) in the case of the initial Contributor, the initial code and documentation distributed under this Agreement, and
-
-    b) in the case of each subsequent Contributor:
-
-    i) changes to the Program, and
-
-    ii) additions to the Program;
-
-    where such changes and/or additions to the Program originate from and are distributed by that particular Contributor. A Contribution 'originates' from a Contributor if it was added to the 
Program by such Contributor itself or anyone acting on such Contributor's behalf. Contributions do not include additions to the Program which: (i) are separate modules of software distributed in 
conjunction with the Program under their own license agreement, and (ii) are not derivative works of the Program.
-
-"Contributor" means any person or entity that distributes the Program.
-
-"Licensed Patents " mean patent claims licensable by a Contributor which are necessarily infringed by the use or sale of its Contribution alone or when combined with the Program.
+Copyright (c) 2013, TrouSerS Project
+All rights reserved.
 
-"Program" means the Contributions distributed in accordance with this Agreement.
-
-"Recipient" means anyone who receives the Program under this Agreement, including all Contributors.
-
-2. GRANT OF RIGHTS
-
-    a) Subject to the terms of this Agreement, each Contributor hereby grants Recipient a non-exclusive, worldwide, royalty-free copyright license to reproduce, prepare derivative works of, publicly 
display, publicly perform, distribute and sublicense the Contribution of such Contributor, if any, and such derivative works, in source code and object code form.
-
-    b) Subject to the terms of this Agreement, each Contributor hereby grants Recipient a non-exclusive, worldwide, royalty-free patent license under Licensed Patents to make, use, sell, offer to 
sell, import and otherwise transfer the Contribution of such Contributor, if any, in source code and object code form. This patent license shall apply to the combination of the Contribution and the 
Program if, at the time the Contribution is added by the Contributor, such addition of the Contribution causes such combination to be covered by the Licensed Patents. The patent license shall not 
apply to any other combinations which include the Contribution. No hardware per se is licensed hereunder.
-
-    c) Recipient understands that although each Contributor grants the licenses to its Contributions set forth herein, no assurances are provided by any Contributor that the Program does not 
infringe the patent or other intellectual property rights of any other entity. Each Contributor disclaims any liability to Recipient for claims brought by any other entity based on infringement of 
intellectual property rights or otherwise. As a condition to exercising the rights and licenses granted hereunder, each Recipient hereby assumes sole responsibility to secure any other intellectual 
property rights needed, if any. For example, if a third party patent license is required to allow Recipient to distribute the Program, it is Recipient's responsibility to acquire that license before 
distributing the Program.
-
-    d) Each Contributor represents that to its knowledge it has sufficient copyright rights in its Contribution, if any, to grant the copyright license set forth in this Agreement.
-
-3. REQUIREMENTS
-
-A Contributor may choose to distribute the Program in object code form under its own license agreement, provided that:
-
-    a) it complies with the terms and conditions of this Agreement; and
-
-    b) its license agreement:
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
 
-    i) effectively disclaims on behalf of all Contributors all warranties and conditions, express and implied, including warranties or conditions of title and non-infringement, and implied 
warranties or conditions of merchantability and fitness for a particular purpose;
-
-    ii) effectively excludes on behalf of all Contributors all liability for damages, including direct, indirect, special, incidental and consequential damages, such as lost profits;
-
-    iii) states that any provisions which differ from this Agreement are offered by that Contributor alone and not by any other party; and
-
-    iv) states that source code for the Program is available from such Contributor, and informs licensees how to obtain it in a reasonable manner on or through a medium customarily used for software 
exchange. 
-
-When the Program is made available in source code form:
-
-    a) it must be made available under this Agreement; and
-
-    b) a copy of this Agreement must be included with each copy of the Program. 
-
-Contributors may not remove or alter any copyright notices contained within the Program.
-
-Each Contributor must identify itself as the originator of its Contribution, if any, in a manner that reasonably allows subsequent Recipients to identify the originator of the Contribution.
-
-4. COMMERCIAL DISTRIBUTION
-
-Commercial distributors of software may accept certain responsibilities with respect to end users, business partners and the like. While this license is intended to facilitate the commercial use of 
the Program, the Contributor who includes the Program in a commercial product offering should do so in a manner which does not create potential liability for other Contributors. Therefore, if a 
Contributor includes the Program in a commercial product offering, such Contributor ("Commercial Contributor") hereby agrees to defend and indemnify every other Contributor ("Indemnified 
Contributor") against any losses, damages and costs (collectively "Losses") arising from claims, lawsuits and other legal actions brought by a third party against the Indemnified Contributor to the 
extent caused by the acts or omissions of such Commercial Contributor in connection with its distribution of the Program in a commercial product offering. The obligations in this section do not apply 
to any claims or Losses relating to any actual or alleged intellectual property infringement. In order to qualify, an Indemnified Contributor must: a) promptly notify the Commercial Contributor in 
writing of such claim, and b) allow the Commercial Contributor to control, and cooperate with the Commercial Contributor in, the defense and any related settlement negotiations. The Indemnified 
Contributor may participate in any such claim at its own expense.
+    Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+    Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the 
distribution.
+    Neither the name of the TrouSerS Project nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
 
-For example, a Contributor might include the Program in a commercial product offering, Product X. That Contributor is then a Commercial Contributor. If that Commercial Contributor then makes 
performance claims, or offers warranties related to Product X, those performance claims and warranties are such Commercial Contributor's responsibility alone. Under this section, the Commercial 
Contributor would have to defend claims against the other Contributors related to those performance claims and warranties, and if a court requires any other Contributor to pay any damages as a 
result, the Commercial Contributor must pay those damages.
-
-5. NO WARRANTY
-
-EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT LIMITATION, 
ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely responsible for determining the appropriateness of using and 
distributing the Program and assumes all risks associated with its exercise of rights under this Agreement, including but not limited to the risks and costs of program errors, compliance with 
applicable laws, damage to or loss of data, programs or equipment, and unavailability or interruption of operations.
-
-6. DISCLAIMER OF LIABILITY
-
-EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 
(INCLUDING WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT 
OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
-
-7. GENERAL
-
-If any provision of this Agreement is invalid or unenforceable under applicable law, it shall not affect the validity or enforceability of the remainder of the terms of this Agreement, and without 
further action by the parties hereto, such provision shall be reformed to the minimum extent necessary to make such provision valid and enforceable.
-
-If Recipient institutes patent litigation against a Contributor with respect to a patent applicable to software (including a cross-claim or counterclaim in a lawsuit), then any patent licenses 
granted by that Contributor to such Recipient under this Agreement shall terminate as of the date such litigation is filed. In addition, if Recipient institutes patent litigation against any entity 
(including a cross-claim or counterclaim in a lawsuit) alleging that the Program itself (excluding combinations of the Program with other software or hardware) infringes such Recipient's patent(s), 
then such Recipient's rights granted under Section 2(b) shall terminate as of the date such litigation is filed.
-
-All Recipient's rights under this Agreement shall terminate if it fails to comply with any of the material terms or conditions of this Agreement and does not cure such failure in a reasonable period 
of time after becoming aware of such noncompliance. If all Recipient's rights under this Agreement terminate, Recipient agrees to cease use and distribution of the Program as soon as reasonably 
practicable. However, Recipient's obligations under this Agreement and any licenses granted by Recipient relating to the Program shall continue and survive.
-
-Everyone is permitted to copy and distribute copies of this Agreement, but in order to avoid inconsistency the Agreement is copyrighted and may only be modified in the following manner. The 
Agreement Steward reserves the right to publish new versions (including revisions) of this Agreement from time to time. No one other than the Agreement Steward has the right to modify this Agreement. 
IBM is the initial Agreement Steward. IBM may assign the responsibility to serve as the Agreement Steward to a suitable separate entity. Each new version of the Agreement will be given a 
distinguishing version number. The Program (including Contributions) may always be distributed subject to the version of the Agreement under which it was received. In addition, after a new version of 
the Agreement is published, Contributor may elect to distribute the Program (including its Contributions) under the new version. Except as expressly stated in Sections 2(a) and 2(b) above, Recipient 
receives no rights or licenses to the intellectual property of any Contributor under this Agreement, whether expressly, by implication, estoppel or otherwise. All rights in the Program not expressly 
granted under this Agreement are reserved.
-
-This Agreement is governed by the laws of the State of New York and the intellectual property laws of the United States of America. No party to this Agreement will bring a legal action under this 
Agreement more than one year after the cause of action arose. Each party waives its rights to a jury trial in any resulting litigation.
-
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON 
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE 
+USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/Makefile.am
--- a/crypto/external/cpl/trousers/dist/Makefile.am     Mon Jan 07 14:08:02 2019 +0000
+++ b/crypto/external/cpl/trousers/dist/Makefile.am     Mon Jan 07 14:57:23 2019 +0000
@@ -1,4 +1,4 @@
-SUBDIRS = src man dist tools
+SUBDIRS = src man dist
 EXTRA_DIST = AUTHORS LICENSE NEWS NICETOHAVES README \
        README.selinux TODO ChangeLog \
        doc/LTC-TSS_LLD_08_r2.pdf \
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/Makefile.in
--- a/crypto/external/cpl/trousers/dist/Makefile.in     Mon Jan 07 14:08:02 2019 +0000
+++ b/crypto/external/cpl/trousers/dist/Makefile.in     Mon Jan 07 14:57:23 2019 +0000
@@ -41,7 +41,7 @@
        NEWS TODO config.guess config.sub depcomp install-sh ltmain.sh \
        missing
 ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/configure.in
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
 am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
        $(ACLOCAL_M4)
 am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \
@@ -157,12 +157,9 @@
 PACKAGE_NAME = @PACKAGE_NAME@
 PACKAGE_STRING = @PACKAGE_STRING@
 PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
 PACKAGE_VERSION = @PACKAGE_VERSION@
 PATH_SEPARATOR = @PATH_SEPARATOR@
 PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
 RANLIB = @RANLIB@
 RPC = @RPC@
 SED = @SED@
@@ -170,6 +167,7 @@
 SHELL = @SHELL@
 STRIP = @STRIP@
 TCSD_DEFAULT_PORT = @TCSD_DEFAULT_PORT@
+TCSD_LDFLAGS = @TCSD_LDFLAGS@
 VERSION = @VERSION@
 abs_builddir = @abs_builddir@
 abs_srcdir = @abs_srcdir@
@@ -227,7 +225,7 @@
 top_build_prefix = @top_build_prefix@
 top_builddir = @top_builddir@
 top_srcdir = @top_srcdir@
-SUBDIRS = src man dist tools
+SUBDIRS = src man dist
 EXTRA_DIST = AUTHORS LICENSE NEWS NICETOHAVES README \
        README.selinux TODO ChangeLog \
        doc/LTC-TSS_LLD_08_r2.pdf \
@@ -538,7 +536,7 @@
        *.zip*) \
          unzip $(distdir).zip ;;\
        esac
-       chmod -R a-w $(distdir); chmod a+w $(distdir)
+       chmod -R a-w $(distdir); chmod u+w $(distdir)
        mkdir $(distdir)/_build
        mkdir $(distdir)/_inst
        chmod a-w $(distdir)
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/README
--- a/crypto/external/cpl/trousers/dist/README  Mon Jan 07 14:08:02 2019 +0000
+++ b/crypto/external/cpl/trousers/dist/README  Mon Jan 07 14:57:23 2019 +0000
@@ -1,7 +1,7 @@
 trousers README
 
   Trousers is an open-source TCG Software Stack (TSS), released under
-the Common Public License. Trousers aims to be compliant with the
+the BSD License. Trousers aims to be compliant with the
 1.1b and 1.2 TSS specifications available from the Trusted Computing
 Group website:
 
@@ -20,7 +20,7 @@
   trousers-tech%lists.sf.net@localhost
 
 Possibly sensitive security related bugs:
-  Debora Velarde <dvelarde%us.ibm.com@localhost>
+  Hon Ching(Vicky) Lo <honclo%linux.vnet.ibm.com@localhost>
 
 Run-of-the-mill bug reports should use the TrouSerS bug tracker:
   http://sourceforge.net/tracker/?group_id=126012&atid=704358
diff -r ec1c1907fc9c -r 417343e082a7 crypto/external/cpl/trousers/dist/aclocal.m4
--- a/crypto/external/cpl/trousers/dist/aclocal.m4      Mon Jan 07 14:08:02 2019 +0000
+++ b/crypto/external/cpl/trousers/dist/aclocal.m4      Mon Jan 07 14:57:23 2019 +0000
@@ -13,8 +13,8 @@
 
 m4_ifndef([AC_AUTOCONF_VERSION],
   [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-m4_if(m4_defn([AC_AUTOCONF_VERSION]), [2.67],,
-[m4_warning([this file was generated for autoconf 2.67.
+m4_if(m4_defn([AC_AUTOCONF_VERSION]), [2.63],,
+[m4_warning([this file was generated for autoconf 2.63.
 You have another version of autoconf.  It may work, but is not guaranteed to.
 If you have problems, you may need to regenerate the build system entirely.
 To do so, use the procedure documented by the package, typically `autoreconf'.])])
@@ -2460,7 +2460,7 @@
   ;;
 




Home | Main Index | Thread Index | Old Index