236 Commits

This Branch

This Branch

All Branches

• print error message instead of segfaulting for invalid chain_len

  closes #126

  rofl0r · 2016-06-23 09:27:15 +01:00
  e527b9ee64
• Fix build failure with -pie in user LDFLAGS

  When hardening flags are set by Debian's auto build system,
  the project fails to build due to usage of -pie, which tells the linker
  to build a PIE binary, and since the user LDFLAGS are deliberately put
  later in the command line to override things, this overrides -shared.
  work around by putting it directly in the last position of the linker
  command line.
  
  closes #124
  Commit message authored by commiter.

  Carlos Maddela · 2016-06-09 21:07:33 +01:00
  635ded3393
• Fix trivial compilation warning

  Fix "missing braces around initializer" warning.

  Carlos Maddela · 2016-06-09 12:09:51 +01:00
  993dfc059d
• don't call dlsym() from close() hook

  it turned out that calling dlsym() may call malloc() in turn,
  so we end up with the same deadlock described in the latest commit.
  
  we thus now put all the fds passed to close pre-init into a list
  and close them at init time.
  
  this may finally fix #119.

  rofl0r · 2016-05-26 19:11:18 +01:00
  f1e5f2ba01
• don't call INIT() from close hook

  it was observed that it is a bad idea to initialize the entire
  infrastructure used by proxychains from the close hook,
  because the following scenario will lead to a deadlock:
  
  - it is possible that the dynlinker executes the initializer code of
    other shared libs first
  - if that code directly or indirectly calls malloc()
  - which calls close() if it decided to use an mmap based allocation
  - will now call our close(), which does
  - call pthread_once which requires a lock
  - creates a thread which calls malloc()
  - which in turn calls our close() another time
  - and our close is still in locked state.
  
  so it seems the only save thing to do is to just get the address
  of the original close function, and call that when we're in a
  pre-init state.
  this may hold for other functions that do lazy initialization as well,
  however for those just calling the original function is probably
  undesired since that could result in unproxified connections.
  it will be needed to analyze on a per-function basis what the best
  thing to do is, and finally rely only on the execution of the init
  function from the gcc initializer.
  
  should fix #119

  rofl0r · 2016-05-26 10:48:32 +01:00
  8870140ff0
• release 4.11
  rofl0r · 2016-02-09 20:12:51 +00:00
  v4.11 aea9172653
• README: add 'Known Problems' section
  rofl0r · 2016-02-09 20:11:40 +00:00
  afdbfcf40c
• configure: whitespace cleanup in help text
  rofl0r · 2016-02-04 12:56:00 +00:00
  058adbcac2
• add check for broken OpenBSD fclose()

  http://marc.info/?l=openbsd-bugs&m=145280872431093&w=2
  
  closes #95

  rofl0r · 2016-02-04 12:49:49 +00:00
  b64c89e0e4
• improve hostsreader test code
  rofl0r · 2016-02-04 09:38:16 +00:00
  a1c31e73b6
• Fix bug in hostsreader

  hostsreader_get() used to assign the IP address to both `name` and `ip`
  fields in `struct hostsreader`, which led to proxychains effectively
  ignoring the contents of /etc/hosts.

  Alexander Batischev · 2016-02-04 09:37:06 +00:00
  f85cecdabe
• getnameinfo: support ipv6 as well
  rofl0r · 2015-12-06 13:01:56 +00:00
  672bf7661d
• test_getnameinfo: improve, check ipv6
  rofl0r · 2015-12-06 13:01:07 +00:00
  4c3be5e1e3
• mute warning in debug mode
  rofl0r · 2015-12-06 12:57:45 +00:00
  0e0e35927c
• factor out setup_hooks()
  rofl0r · 2015-12-02 12:14:58 +00:00
  205004fa2a
• debug.c: fix for ipv6 changes

  closes #94

  rofl0r · 2015-12-01 20:37:27 +00:00
  50c84176da
• configure: check for availability of s6_addr16

  this should fix the build of the recently added ipv6 code on MacOS X,
  OpenBSD and eventually FreeBSD.
  
  closes #83
  closes #85
  
  thanks to @cam13 and @vonnyfly for reporting/testing.

  rofl0r · 2015-10-01 14:14:23 +01:00
  1294d0a004
• README: fix omission and whitespace
  rofl0r · 2015-09-19 11:09:41 +01:00
  e9bf9623ba
• remove obsolete config.mak example

  config.mak is autogenerated by the configure script since a long time.
  there's no need to supply the example anymore, and it appears a lot
  of people are looking into the directory expecting to find a binary
  distribution.

  rofl0r · 2015-09-15 22:00:43 +01:00
  8a7081409e
• connect(): handle ipv4-mapped ipv6 addresses

  if an ipv4-mapped ipv6 address is detected, the ip is converted
  into v4 format because it may actually be one of our remote dns ips.
  it was reported that a program called "maven", when getting handed our
  fake ips in the remote dns subnet, converts the ip to v6 prior to calling
  connect():
  [proxychains] Strict chain ... 127.0.0.1:1080 ... ::ffff:224.0.0.1:443
  <--socket error or timeout!
  
  fixes #77

  rofl0r · 2015-09-15 21:19:51 +01:00
  32df7ff152
• add testcase for ipv4-mapped ipv6 address
  rofl0r · 2015-09-15 21:14:58 +01:00
  097c7f9125
• preliminary ipv6 support

  only basic testing was done (with 2 socks5 proxies listening on ::1)
  but seems to work as intended.
  
  ipv6 support for the hostsreader (/etc/hosts) is not implemented so far.

  rofl0r · 2015-08-10 17:00:26 +01:00
  2237749567
• fix socks5 bug: always requested user auth cap

  since "user" always points to a statically allocated string buffer,
  the test for if(user)... was bogus.
  use ulen instead.
  
  this bug should only be visible on socks servers that require auth
  if username was not passed, so it was probably not really an issue.

  rofl0r · 2015-06-14 12:10:32 +01:00
  9969dd3a22
• put INIT() call consistently at beginning of hooked funcs
  rofl0r · 2015-06-14 11:16:59 +01:00
  d900b090fe
• clean up some debug ifdefs
  rofl0r · 2015-06-14 10:53:33 +01:00
  afe6171cad
• remove commented-out code [2]
  rofl0r · 2015-06-14 10:27:41 +01:00
  51b2eb91ce
• remove commented-out code
  rofl0r · 2015-06-14 09:57:05 +01:00
  ae16ae9fc9
• whitespace fixes for proxytype switch block
  rofl0r · 2015-06-13 20:32:15 +01:00
  338b9ce4e3
• replace string manip. in HTTP setup code with single snprintf
  rofl0r · 2015-06-13 20:21:59 +01:00
  c6553c2cc5
• simplify socks5 buffer setup code
  rofl0r · 2015-06-13 19:02:11 +01:00
  49adb6ce29
• simplify start_chain struct setup
  rofl0r · 2015-06-13 18:37:57 +01:00
  c7fa7bf86a
• release 4.10
  rofl0r · 2015-06-09 08:23:28 +02:00
  v4.10 29df9abec3
• fix segfault in DNS mapping lookup code

  the allocatorthread got pointers to RAM which were reallocated
  behind the back, and if realloc() couldn't grow in-place, lead
  to segfaults in applications that do a lot of DNS-lookups such
  as webbrowsers.
  
  closes #66
  closes #31
  
  thanks to @ravomavain for tracking down the issue.

  rofl0r · 2015-06-06 11:43:53 +01:00
  2182eff358
• configure: respect user LDFLAGS without breaking link order
  rofl0r · 2015-06-04 21:11:08 +01:00
  53c6c2ca9b
• Revert "Fix LDFLAGS"

  This reverts commit e79e05a228.
  
  This commit broke link order for a number of people.

  rofl0r · 2015-06-04 21:04:30 +01:00
  c9c51d6705
• Revert "fix makefile link order"

  This reverts commit 377b474b40.
  
  There still are problems with the link order.
  Revert to the known-good version.

  rofl0r · 2015-06-04 21:03:25 +01:00
  fda4ba37ec
• release 4.9
  rofl0r · 2015-05-28 08:35:57 +02:00
  v4.9 f35f14c1ed
• fixup for 9ab7dbe
  rofl0r · 2015-05-21 14:04:10 +01:00
  68e42d59f7
• fix for CVE-2015-3887

  closes #60

  rofl0r · 2015-05-21 13:46:22 +01:00
  9ab7dbeb3b
• fix compilation with openbsd

  closes #52

  rofl0r · 2015-04-08 11:09:48 +01:00
  ba61b48fd7
• fix makefile link order
  jackyzy823 · 2015-04-03 22:37:26 +08:00
  377b474b40
• Merge pull request #51 from tyll/ldflags

  Fix LDFLAGS

  rofl0r · 2015-03-22 19:34:09 +01:00
  d461f397b2
• Merge pull request #44 from sarum9in/master

  add sendto hook to handle MSG_FASTOPEN flag

  rofl0r · 2015-03-22 19:32:17 +01:00
  30495fde39
• Fix LDFLAGS

  - Use user-supplied LDFLAGS
  - Use LDFLAGS for linking proxychains4

  Till Maas · 2015-03-15 11:46:31 +01:00
  e79e05a228
• support MSG_FASTOPEN on old kernels
  Aleksey Filippov · 2015-02-17 15:30:43 +01:00
  4e986caa2a
• add sendto hook to handle MSG_FASTOPEN flag
  Aleksey Filippov · 2015-01-23 17:14:37 +01:00
  8dd08e2cd2
• README: fix typo
  rofl0r · 2014-11-15 17:54:15 +01:00
  ea51cdac29
• hostsreader: use temporary vars for string manipulation

  working directly with the passed variables could lead to bugs when
  some lines in the hosts file aren't well-formed and the loop is taken
  several times while the buf vars are already modified.

  rofl0r · 2014-11-14 13:19:06 +01:00
  25ee4c318d
• replace problematic hostentdb with hostsreader

  the hostentdb introduced between 4.2 and 4.3
  (via af5c6f0c6a )
  had several issues:
  - it caused breakage on FreeBSD and was commented out there
  - prevented usage of the hostdb when proxy_dns was turned off
    (issue #42)
  - required dynamic memory allocation which was accessed from several
    threads
  - wouldnt reflect changes to the hosts file made during program run
  
  the only sensible solution is to remove the hostentdb and replace it
  with a home-grown hosts parser (we can't use gethostent() since
  that would mess up the gethostent()-state from different threads).
  
  the new parser used here is deliberately held simple and only meant
  to provide the user with means to reference hardcoded ipv4 addresses
  via his hosts file.
  
  fixes #42

  rofl0r · 2014-11-14 12:33:58 +01:00
  4fb7eb0532
• fix FSF address in COPYING to mute opensuse build service complaints
  rofl0r · 2014-09-13 23:33:26 +02:00
  567935b1ab