• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

stefanberger / swtpm
73%
master: 74%

Build:
Build:
LAST BUILD BRANCH: HEAD
DEFAULT BRANCH: master
Repo Added 23 Oct 2018 06:52PM UTC
Files 84
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH no_file_streams
branch: no_file_streams
CHANGE BRANCH
x
Reset
  • no_file_streams
  • 0.4.0-release
  • HEAD
  • add_seccomp_profile
  • atomic_file_write
  • capabilities
  • changes
  • check_gnutls_3_4_0
  • cleanup
  • coverall
  • coverity_scan
  • cuse_flags_options
  • cuse_partial_read
  • dynamic_hlk_compliance
  • enable_spaces_in_paths
  • fix
  • fix_deb_dependencies
  • fix_swtpm_localca_passwords
  • fix_tests
  • fix_typo
  • fixes
  • manpages
  • master
  • master.build-sys
  • master.deadcode
  • master.fix_build
  • master.fix_cuse_tpm
  • master.fix_swtpm_bios_test
  • master.next
  • master.next.libtpms-rev155
  • master.ossl3.rsa
  • master.swtpm-localca-to-bindir
  • master.swtpm_setup_memcpy_macro_fix
  • master.swtpm_setup_tpm_version_support
  • master.wextra
  • osx_fix
  • python-install
  • release-0.5.0
  • restorecon
  • revert_port_change
  • rpmspec
  • rsa_3072
  • rsa_3072_splitoff
  • seccomp_cleanup
  • sigpipe_fixes
  • silent_rules
  • softhsm_setup
  • stable-0.1.0
  • stable-0.1.0-next
  • stable-0.2.0
  • stable-0.2.0-next
  • stable-0.3.0
  • stable-0.3.0-next
  • stable-0.4
  • stable-0.4-next
  • stable-0.5
  • stable-0.5-next
  • stable-0.6
  • stable-0.6-next
  • stable-0.7
  • stefanberger/add_file_permission_test
  • stefanberger/backend_is_available
  • stefanberger/debian-no-trousers
  • stefanberger/fix-tpm2-abrmd-tests
  • stefanberger/fix_for_bsd
  • stefanberger/fix_fresbsd
  • stefanberger/fix_issue568
  • stefanberger/fix_memory_leaks
  • stefanberger/fsync_best_effort
  • stefanberger/libtpms_profiles
  • stefanberger/print_blobsize_of_states
  • stefanberger/swtpm_search_all_states
  • swtpm-localca-in-python
  • swtpm_cert_work
  • swtpm_localca_in_c
  • swtpm_setup_fds
  • swtpm_setup_fix_bad_pathjoin
  • swtpm_setup_in_c
  • swtpm_setup_in_python
  • swtpm_setup_in_python_p2
  • swtpm_setup_rsa_3072_fixes
  • swtpm_setup_tcsd_interface_fixes
  • swtpm_setup_write_certfiles
  • tcg_command_prefix
  • test
  • test_savecontext
  • testing
  • tests_on_bionic
  • tmp-testing-rev159
  • tpmprofile104
  • use_ibmtss_1.6.0
  • use_tpm2_for_signing_swtpm_cert
  • v0.1.0
  • v0.1.1
  • v0.2.1
  • v0.3.0
  • v0.3.1
  • v0.3.2
  • v0.3.3
  • v0.3.4
  • v0.4.0
  • v0.4.1
  • v0.4.2
  • v0.5.0
  • v0.5.1
  • v0.5.2
  • v0.6.0
  • v0.6.1
  • v0.7.0-rc1
  • various

pending completion
2805

push

travis-ci-com

stefanberger
samples: Do not follow symlink on logfile (CVE-2020-28407)

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

3733 of 5079 relevant lines covered (73.5%)

22713.51 hits per line

Relevant lines Covered
Build:
Build:
5079 RELEVANT LINES 3733 COVERED LINES
22713.51 HITS PER LINE
Source Files on no_file_streams
  • Tree
  • List 56
  • Changed 12
  • Source Changed 1
  • Coverage Changed 12
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
2805 no_file_streams samples: Do not follow symlink on logfile (CVE-2020-28407) Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> push 17 Nov 2020 06:29PM UTC stefanberger travis-ci-com pending completion  
2798 no_file_streams Merge 205be0589 into b94523049 Pull #367 13 Nov 2020 02:43PM UTC web-flow travis-ci-com pending completion  
2797 no_file_streams swtpm: Use open() (not fopen()) when accessing statefile (CVE-2020-28407) This patch addresses CVE-2020-28407. Use the open() call rather than the fopen() call when accessing the statefile and make sure we do not follow symlinks using O_NOFOLLOW... push 13 Nov 2020 02:26PM UTC stefanberger travis-ci-com pending completion  
2795 no_file_streams swtpm: Switch to open() from fopen() when accessing statefile Use the open() call rather than the fopen() call when accessing the statefile and make sure we do not follow symlinks using O_NOFOLLOW. The modification does not allow an attacker to ... push 10 Nov 2020 04:17PM UTC stefanberger travis-ci-com pending completion  
2796 no_file_streams Merge 613dae26f into b94523049 Pull #367 10 Nov 2020 04:17PM UTC web-flow travis-ci-com pending completion  
2793 no_file_streams swtpm: Switch to open() from fopen() when accessing statefile Use the open() call rather than the fopen() call when accessing the statefile and make sure we do not follow symlinks using O_NOFOLLOW. The modification does not allow an attacker to ... push 10 Nov 2020 01:46PM UTC stefanberger travis-ci-com pending completion  
2794 no_file_streams Merge d857a47e4 into b94523049 Pull #367 10 Nov 2020 12:56PM UTC web-flow travis-ci-com pending completion  
2781 no_file_streams Merge aac2a85c0 into 22419acee Pull #367 09 Nov 2020 01:52PM UTC web-flow travis-ci pending completion  
2780 no_file_streams swtpm: Switch to open() from fopen() when accessing statefile Use the open() call rather than the fopen() call when accessing the statefile and make sure we do not follow symlinks using O_NOFOLLOW. The modification does not allow an attacker to ... push 09 Nov 2020 01:18PM UTC stefanberger travis-ci pending completion  
2779 no_file_streams Merge fdf05dc1d into 22419acee Pull #367 09 Nov 2020 12:48PM UTC web-flow travis-ci pending completion  
See All Builds (3340)
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc