Mercurial > ~mikael > mcabber > hg
annotate mcabber/mcabber/xmpp_s10n.h @ 2283:6e1ead98930d
Check origin of roster pushes
MCabber is vulnerable to roster push attacks as described by Daniel Gultsch
at https://gultsch.de/gajim_roster_push_and_message_interception.html.
This patch should fix the problem by checking the sender of the iq:roster
stanzas.
Thanks to Sam Whited for the report.
author | Mikael Berthe <mikael@lilotux.net> |
---|---|
date | Mon, 21 Nov 2016 20:35:28 +0100 |
parents | e6d355e50d7a |
children |
rev | line source |
---|---|
1668
41c26b7d2890
Install mcabber headers
Myhailo Danylenko <isbear@ukrpost.net>
parents:
1604
diff
changeset
|
1 #ifndef __MCABBER_XMPP_S10N_H__ |
41c26b7d2890
Install mcabber headers
Myhailo Danylenko <isbear@ukrpost.net>
parents:
1604
diff
changeset
|
2 #define __MCABBER_XMPP_S10N_H__ 1 |
1604
351427ef0b4b
Remove #include's of C files
Mikael Berthe <mikael@lilotux.net>
parents:
diff
changeset
|
3 |
1668
41c26b7d2890
Install mcabber headers
Myhailo Danylenko <isbear@ukrpost.net>
parents:
1604
diff
changeset
|
4 #include <mcabber/events.h> |
1604
351427ef0b4b
Remove #include's of C files
Mikael Berthe <mikael@lilotux.net>
parents:
diff
changeset
|
5 |
1685
1342df44c814
Improved events interface
Myhailo Danylenko <isbear@ukrpost.net>
parents:
1668
diff
changeset
|
6 gboolean evscallback_subscription(guint evcontext, const char *arg, gpointer userdata); |
1604
351427ef0b4b
Remove #include's of C files
Mikael Berthe <mikael@lilotux.net>
parents:
diff
changeset
|
7 |
1668
41c26b7d2890
Install mcabber headers
Myhailo Danylenko <isbear@ukrpost.net>
parents:
1604
diff
changeset
|
8 #endif /* __MCABBER_XMPP_S10N_H__ */ |
1604
351427ef0b4b
Remove #include's of C files
Mikael Berthe <mikael@lilotux.net>
parents:
diff
changeset
|
9 |
1811 | 10 /* vim: set et cindent cinoptions=>2\:2(0 ts=2 sw=2: For Vim users... */ |