TapTap abad1664ba security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup ...

- file: open -K dirlink referents via a race-safe relative O_NOFOLLOW walk
  from the authorized-root fd instead of re-opening an absolute realpath()
  result (removes the intermediate-symlink swap TOCTOU).
- transport_ssh: always single-quote the server path, including --old-args,
  so no mode can inject shell metacharacters.
- transport_tls: set SSL_OP_NO_COMPRESSION and (guarded) SSL_OP_NO_RENEGOTIATION.
- credentials: reject --password-file/--early-input with any group/other
  permission bit; chmod 0600 the affected test fixtures.
- file_store: export file_store_write_sparse() and remove the verbatim
  file.c duplicate.

2026-09-12 15:01:48 +02:00

..

fuzz

fix: address PR review — fuzz target fixes, UBSan, CI improvements

2026-07-20 14:44:41 +02:00

integration

security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup

2026-09-12 15:01:48 +02:00

conftest.py

ci: address review — use --dist=load, per-module teardown, exclude setpriv

2026-09-08 17:25:56 +02:00

runner.c

feat(p6-batch): residual-batch write/read driver + codec

2026-09-10 21:40:07 +02:00

test_array_list.c

test: harden allocation checks

2026-08-16 09:37:28 +02:00

test_array_list.h

First Commit

2026-06-10 16:58:35 +02:00

test_batch.c

fix(p6-batch): reject clean EOF on record read; add traversal/EOF security tests

2026-09-10 22:05:18 +02:00

test_batch.h

feat(p6-batch): residual-batch write/read driver + codec

2026-09-10 21:40:07 +02:00

test_change_list.c

feat: add structured per-file change output model (-i, --list-only, --out-format, --log-file-format)

2026-09-06 12:34:10 +02:00

test_change_list.h

feat: add structured per-file change output model (-i, --list-only, --out-format, --log-file-format)

2026-09-06 12:34:10 +02:00

test_checksum.c

fix: reject xxh3 alias, pin handshake digest length to algorithm, simplify xxh64 copy, note FIPS md5

2026-09-07 19:50:52 +02:00

test_checksum.h

test: coverage for --checksum-choice/--cc and --checksum-seed

2026-09-07 17:42:53 +02:00

test_chunk.c

style: cppcheck — const-correctness in file_send_special and test_chunk

2026-09-08 22:53:47 +02:00

test_chunk.h

First Commit

2026-06-10 16:58:35 +02:00

test_client_cli.c

fix(p7-privilege): harden copy-as/super gates, own dirs/specials

2026-09-12 12:34:43 +02:00

test_client_cli.h

test: add unit test coverage for transports, config, file, multiprocessing (#131-#137)

2026-07-29 19:19:19 +02:00

test_compression.c

Merge remote-tracking branch 'origin/feat/compress-threads' into dev

2026-09-05 02:01:43 +02:00

test_compression.h

Add compression and scanner tests; fix chunk_decompress data ownership bug, data_destroy NULL safety, chunk_compress memory leak

2026-07-04 21:25:34 +02:00

test_config.c

fix(p8-security): enforce daemon ownership policy, gate fake-super replay, drop implicit numeric-ids, make copy-as failures per-entry

2026-09-12 14:00:55 +02:00

test_config.h

First Commit

2026-06-10 16:58:35 +02:00

test_credentials.c

security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup

2026-09-12 15:01:48 +02:00

test_credentials.h

feat(d5-daemon-auth): password auth, --password-file, --early-input

2026-09-10 12:50:56 +02:00

test_daemon_conf.c

fix(p8-security): enforce daemon ownership policy, gate fake-super replay, drop implicit numeric-ids, make copy-as failures per-entry

2026-09-12 14:00:55 +02:00

test_daemon_conf.h

feat(d5-daemon-core): daemon lifecycle, module config, ::dest, PROTOCOL 2.15.0

2026-09-09 17:48:07 +02:00

test_data.c

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_data.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_delay_updates.c

fix: --delay-updates delete/backup collisions, publish-failure test, staging lock

2026-09-06 14:19:18 +02:00

test_delay_updates.h

feat: implement --delay-updates receiver staging and publication

2026-09-06 13:20:03 +02:00

test_delta.c

test: coverage for --checksum-choice/--cc and --checksum-seed

2026-09-07 17:42:53 +02:00

test_delta.h

feat: add delta transfer for incremental sync

2026-07-18 20:00:15 +02:00

test_file_sendfile.c

refactor: remove dead API, rename to_disk/config_is_remote_dest, fix perror newlines

2026-08-30 13:50:42 +02:00

test_file_sendfile.h

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_file.c

security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup

2026-09-12 15:01:48 +02:00

test_file.h

fix(p5-remote-option): wire server --trust-sender, align save-layer gates, add hostile-sender test

2026-09-09 14:23:59 +02:00

test_fuzz_smoke.c

metadata times: -U/--atimes, -N/--crtimes, --open-noatime, -O/-J

2026-09-08 20:58:56 +02:00

test_fuzz_smoke.h

test: add unit test coverage for transports, config, file, multiprocessing (#131-#137)

2026-07-29 19:19:19 +02:00

test_glob.c

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_glob.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_iconv.c

fix(p6-iconv): prevent convert buffer overflow; validate both directions; reset on error; more tests

2026-09-10 17:49:29 +02:00

test_iconv.h

test(p6-iconv): iconv unit, config wire-roundtrip, integration tests

2026-09-10 17:13:06 +02:00

test_log.c

feat: add rsync stderr output modes

2026-09-03 16:07:51 +02:00

test_log.h

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_metadata.c

fix(p7-times): dir-time entries only record (never create dirs); bound/chunk dir-time frames; harden list add; docs+tests

2026-09-12 11:06:05 +02:00

test_metadata.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_motd.c

feat(d5-daemon-motd): daemon MOTD display + --no-motd

2026-09-10 13:52:24 +02:00

test_motd.h

feat(d5-daemon-motd): daemon MOTD display + --no-motd

2026-09-10 13:52:24 +02:00

test_multiprocessing.c

test: drop racy queued_bytes==0 assert in byte-budget test

2026-09-06 16:27:54 +02:00

test_multiprocessing.h

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_property.c

merge: resolve dev (quality refactor) into security-fixes

2026-09-01 20:46:07 +02:00

test_property.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_protocol.c

test: cover -m late-deletion failure, receiver leak exits, timed ACK read

2026-09-06 19:35:25 +02:00

test_protocol.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_queue.c

test: harden allocation checks

2026-08-16 09:37:28 +02:00

test_queue.h

First Commit

2026-06-10 16:58:35 +02:00

test_robustness.c

fix: enforce max alloc in delta deserialization

2026-09-04 02:25:26 +02:00

test_robustness.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_scanner.c

fix(p7-times): dir-time entries only record (never create dirs); bound/chunk dir-time frames; harden list add; docs+tests

2026-09-12 11:06:05 +02:00

test_scanner.h

Add compression and scanner tests; fix chunk_decompress data ownership bug, data_destroy NULL safety, chunk_compress memory leak

2026-07-04 21:25:34 +02:00

test_server_cli.c

fix(p7-privilege): harden copy-as/super gates, own dirs/specials

2026-09-12 12:34:43 +02:00

test_server_cli.h

feat(d5-daemon-core): daemon lifecycle, module config, ::dest, PROTOCOL 2.15.0

2026-09-09 17:48:07 +02:00

test_server.c

test: cover absent-parent no-op and --dirs scanner skip

2026-09-07 18:33:34 +02:00

test_server.h

test: add unit test coverage for transports, config, file, multiprocessing (#131-#137)

2026-07-29 19:19:19 +02:00

test_shared_utils.c

test: append/append-verify resume coverage

2026-09-07 15:43:33 +02:00

test_shared_utils.h

First Commit

2026-06-10 16:58:35 +02:00

test_stop.c

fix(p6-stop): block delete-manifest on early stop; sync -m manifest access; overflow guard

2026-09-10 17:39:34 +02:00

test_stop.h

test(p6-stop): unit and integration tests for stop deadlines

2026-09-10 16:27:49 +02:00

test_stress.c

test: harden allocation checks

2026-08-16 09:37:28 +02:00

test_stress.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_transport_ssh.c

security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup

2026-09-12 15:01:48 +02:00

test_transport_ssh.h

test: add transport module unit tests; docs: update README (#39, #119)

2026-07-21 16:55:07 +02:00

test_transport_tcp.c

fix(p5-socket): clang-format 18 reflow + cppcheck const-correctness

2026-09-09 14:29:46 +02:00

test_transport_tcp.h

test: add transport module unit tests; docs: update README (#39, #119)

2026-07-21 16:55:07 +02:00

test_transport_tls.c

security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup

2026-09-12 15:01:48 +02:00

test_transport_tls.h

test: add transport module unit tests; docs: update README (#39, #119)

2026-07-21 16:55:07 +02:00

test_utils.h

fix: accept_loop race condition, auto-detect valgrind, cppcheck suppressions

2026-07-20 21:04:53 +02:00

test_xattr.c

fix(p8-security): enforce daemon ownership policy, gate fake-super replay, drop implicit numeric-ids, make copy-as failures per-entry

2026-09-12 14:00:55 +02:00

test_xattr.h

acls/xattrs: -X/--xattrs, -A/--acls, --fake-super

2026-09-08 22:27:53 +02:00