Timeline
Not logged in

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

50 most recent check-ins by user dmitry

2012-11-06
18:38
Make sure file names in file browser don't wrap by adding white-space property to default CSS. check-in: b83278f6ff user: dmitry tags: trunk
2012-11-04
12:59
Fix typos. Closed-Leaf check-in: 45065c5c28 user: dmitry tags: spelling
2011-12-16
22:00
Add SSL SNI support (suggested by BohwaZ on mailing list). Simplify setting of port for SSL connection. Closed-Leaf check-in: 132dbcedbc user: dmitry tags: dmitry-fixes
2011-10-04
15:20
Add HMAC-SHA1 implementation. Closed-Leaf check-in: dcee34b25f user: dmitry tags: multisession
15:15
Merge protection against timing attacks into trunk. check-in: d4a341b49d user: dmitry tags: trunk
14:38
Merge trunk into dmitry-security branch. Closed-Leaf check-in: f4eb0f5afc user: dmitry tags: dmitry-security
14:34
Rename constant_time_eq to constant_time_cmp to better indicate that these functions return 0 when values are equal, like memcmp, strcmp, etc., not truth, to avoid possible mistakes. check-in: d244c484e7 user: dmitry tags: dmitry-security
14:28
Revert the previous change after thinking more about it. Login cards in the sync protocol have the following format: login userid nonce signature Nonce is SHA-1 of the message that follows this line, signature is SHA-1 of the concatenation of the nonce and user's shared secret. The successful timing attack can reveal only signature for this p... check-in: 13a9a1244c user: dmitry tags: dmitry-security
2011-09-30
10:51
It seems like blob_constant_time_eq() is unnecessary for sync protocol signatures; removed. check-in: 48bcfbd47b user: dmitry tags: dmitry-security
09:41
Catch zero length early in blob_constant_time_eq(). check-in: e3d022dffa user: dmitry tags: dmitry-security
2011-09-29
21:06
Fix to the previous fix: install function to the correct database. check-in: 3782276da6 user: dmitry tags: dmitry-security
21:04
Fix login groups. check-in: 6f29649ef3 user: dmitry tags: dmitry-security
17:26
Fix comment. check-in: a0fa120b74 user: dmitry tags: dmitry-security
17:21
Protect against timing attacks by using constant-time comparison function to compare passwords and cookies. check-in: 7f110475ec user: dmitry tags: dmitry-security
14:07
When creating a manifest, get isExe and isLink bits from filesystem at once instead of doing two stat(2) calls. check-in: 9bfa186be0 user: dmitry tags: trunk
11:45
Change file_size() to file_wd_size() in file_is_the_same(). check-in: 13a771ce18 user: dmitry tags: trunk
11:05
Cache "manifest" setting in fossil_reserved_name() instead of reading it from the database on every call. This speeds up adding many files. check-in: a369dc7721 user: dmitry tags: trunk
2011-09-27
19:28
Call file_wd_isdir() in file_mkdir(). check-in: 13120e9620 user: dmitry tags: trunk
19:15
Change a few instances of file_isdir() to file_wd_isdir(). check-in: f1329470c0 user: dmitry tags: trunk
2011-09-25
11:14
Fix double LI tags when listing wiki attachments for users without permissions. check-in: 12272b7ff0 user: dmitry tags: trunk
2011-09-24
01:39
Disable SSLv2 in HTTPS client. This version of the protocol is considered insecure and has been deprecated; all modern browsers disable it. check-in: ea1d369d23 user: dmitry tags: trunk
2011-09-11
13:57
Fix three remaining instances of printing rebuild progress in CGI mode. Ticket [19be0265ff]. Closed-Leaf check-in: 2cd21f8dc2 user: dmitry tags: dmitry-fixes
12:27
Disallow creating users with empty login. Ticket [66ce1088]. check-in: e1ea6c26d0 user: dmitry tags: dmitry-fixes
12:26
Fix typos in documentation. Tickets [09310d1a] and [806c4358]. check-in: 9150a8a234 user: dmitry tags: dmitry-fixes
12:19
Show overridden user in commit comment. Ticket [4af785ba]. check-in: 7c82dbf546 user: dmitry tags: dmitry-fixes
2011-09-08
14:30
Add comment describing file_wd_isfile() function. check-in: f23334cbda user: dmitry tags: trunk
13:07
Remove unused variable from ticket_cmd(). check-in: a0b3769b01 user: dmitry tags: trunk
13:02
Merge fixes and refactoring from symlinks branch. check-in: c05f6afaf2 user: dmitry tags: trunk
12:59
Fix Windows build. Closed-Leaf check-in: 4e586a2d8e user: dmitry tags: symlinks
11:59
Introduce new file_wd_* functions that use stat() or lstat() depending on 'allow-symlinks' setting, and use them when dealing with files inside the working directory. Make file_* functions always use stat() as before merging symlink support. Fix renaming of symlinks when merging (via new function symlink_copy()). Rename create_symlink() to symlin... check-in: 8a0c546990 user: dmitry tags: symlinks
11:52
Merge latest trunk into symlinks branch. check-in: 981e5c62e3 user: dmitry tags: symlinks
2011-09-06
13:23
Close A and LI tags when displaying new and deleted files in timeline. check-in: 8d703ff956 user: dmitry tags: trunk
2011-09-02
12:39
Merge symlink fixes into trunk. check-in: c97535c5d8 user: dmitry tags: trunk
12:27
Merge latest trunk into symlinks branch. check-in: fee3c6767d user: dmitry tags: symlinks
10:34
Print description of conflict when 'stash apply' cannot merge a symlink and a regular file. check-in: bca6924e5f user: dmitry tags: symlinks
10:19
Uncomment contents of Makefile.in. Silence OpenSSL deprecation warnings on Mac OS X 10.7. check-in: 73443aa7f8 user: dmitry tags: symlinks
09:34
Bring Makefile.in back. check-in: 6729562675 user: dmitry tags: symlinks
2011-09-01
23:55
Change a couple of unlink()'s to file_delete(). check-in: 61d49d92bb user: dmitry tags: symlinks
23:44
Fix indentation in update.c. check-in: 1d54dce41e user: dmitry tags: symlinks
23:18
Merge latest changes from trunk. check-in: 2b1a4797dd user: dmitry tags: symlinks
22:56
Refactor file_perm(), file_islink(), and file_isexe(). Now file_perm() calls stat only once. check-in: eac23495a9 user: dmitry tags: symlinks
22:55
Fix merge when merging UPDATEs a symlink to a regular file and vice versa. check-in: 82a95b4692 user: dmitry tags: symlinks
22:52
Fix undo when having a regular file on disk and symlink in undo. check-in: 324763b932 user: dmitry tags: symlinks
22:15
Fix saving undo for symlinks. check-in: 0762b1d9c6 user: dmitry tags: symlinks
20:56
Merge latest trunk. check-in: 02ee688a4d user: dmitry tags: symlinks
2011-08-31
16:28
Merge improvements to artifact descriptions into symlinks branch. Also modify displaying of permissions: now web UI shows "File", "Executable file", or "Symbolic link" in file artifact description. check-in: 3115774ffe user: dmitry tags: symlinks
09:55
Merge latest trunk. check-in: 40ed431ca5 user: dmitry tags: symlinks
2011-08-28
11:22
Make blob_read_link() C89-compatible on Unix again. check-in: 034819087d user: dmitry tags: symlinks
11:01
Use file_delete() instead of unlink() in vfile_to_disk(). check-in: 08311ffc6a user: dmitry tags: symlinks
10:43
Handle errors in blob_read_link(). check-in: d43029f6f4 user: dmitry tags: symlinks