gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2017-11-25	fusefrontend_reverse: Do not mix up cache information for different directories	Sebastian Lackner
	Fixes https://github.com/rfjakob/gocryptfs/issues/168 Steps to reproduce the problem: * Create a regular reverse mount point * Create files with the same very long name in multiple directories - so far everything works as expected, and it will appear with a different name each time, for example, gocryptfs.longname.A in directory A and gocryptfs.longname.B in directory B * Try to access a path with A/gocryptfs.longname.B or B/gocryptfs.longname.A - this should fail, but it actually works. The problem is that the longname cache only uses the path as key and not the dir or divIV. Assume an attacker can directly interact with a reverse mount and knows the relation longname path -> unencoded path in one directory, it allows to test if the same unencoded filename appears in any other directory.
2017-03-07	tests: reverse: don't run tests that ignore "-plaintextnames" twice	Jakob Unterwurzacher
	TestMain() runs all tests twice, once with plaintextnames=true and once with false. Several tests mount their own filesystem and ignore the plaintextnames variable. It makes no sense to run them twice, so skip execution when plaintextnames is set.
2016-11-10	ctlsock: prevent panic on invalid decrypt request	Jakob Unterwurzacher

2016-11-10	ctlsock: implement EncryptPath for reverse mode, add tests	Jakob Unterwurzacher