gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2021-08-23	go mod: declare module version v2	Jakob Unterwurzacher
	Our git version is v2+ for some time now, but go.mod still declared v1. Hopefully making both match makes https://pkg.go.dev/github.com/rfjakob/gocryptfs/v2 work. All the import paths have been fixed like this: find . -name \*.go \| xargs sed -i s%github.com/rfjakob/gocryptfs/%github.com/rfjakob/gocryptfs/v2/%
2020-05-09	ctlsock: create exported ctlsock client library	Jakob Unterwurzacher
	The former interal ctlsock server package is renamed to ctlsocksrv.
2019-01-02	tests: add fd leak retry logic to UnmountErr, really return error	Jakob Unterwurzacher
	Give the gocryptfs process one extra millisecond to close files. Allows us to drop several other sleeps. UnmountErr now really returns an error when it detects an fd leak instead of just printing a message.
2019-01-02	tests: reverse: add ctlsocket cleanup delay	Jakob Unterwurzacher

2018-04-02	fsck: clean up log output	Jakob Unterwurzacher
	Make sure we get only 1 warning output per problem. Also, add new corruption types to broken_fs_v1.4.
2017-11-25	fusefrontend_reverse: Do not mix up cache information for different directories	Sebastian Lackner
	Fixes https://github.com/rfjakob/gocryptfs/issues/168 Steps to reproduce the problem: * Create a regular reverse mount point * Create files with the same very long name in multiple directories - so far everything works as expected, and it will appear with a different name each time, for example, gocryptfs.longname.A in directory A and gocryptfs.longname.B in directory B * Try to access a path with A/gocryptfs.longname.B or B/gocryptfs.longname.A - this should fail, but it actually works. The problem is that the longname cache only uses the path as key and not the dir or divIV. Assume an attacker can directly interact with a reverse mount and knows the relation longname path -> unencoded path in one directory, it allows to test if the same unencoded filename appears in any other directory.
2017-03-07	tests: reverse: don't run tests that ignore "-plaintextnames" twice	Jakob Unterwurzacher
	TestMain() runs all tests twice, once with plaintextnames=true and once with false. Several tests mount their own filesystem and ignore the plaintextnames variable. It makes no sense to run them twice, so skip execution when plaintextnames is set.
2016-11-10	ctlsock: prevent panic on invalid decrypt request	Jakob Unterwurzacher

2016-11-10	ctlsock: implement EncryptPath for reverse mode, add tests	Jakob Unterwurzacher