Fossil

Changes On Branch dmitry-security
Login

Changes On Branch dmitry-security

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Changes In Branch dmitry-security Excluding Merge-Ins

This is equivalent to a diff from 3fac77d7 to f4eb0f5a

2011-10-04
15:15
Merge protection against timing attacks into trunk. (check-in: d4a341b4 user: dmitry tags: trunk)
14:38
Merge trunk into dmitry-security branch. (Closed-Leaf check-in: f4eb0f5a user: dmitry tags: dmitry-security)
14:34
Rename constant_time_eq to constant_time_cmp to better indicate that these functions return 0 when values are equal, like memcmp, strcmp, etc., not truth, to avoid possible mistakes. (check-in: d244c484 user: dmitry tags: dmitry-security)
2011-10-03
16:34
Disabling Cache-control: no-store, as it made firefox forget about form field contents on back/forward in history.

Resolution achieved by a minimal consensus at this thread on the mailing list. (check-in: 3fac77d7 user: viriketo tags: trunk)

2011-10-02
13:30
minor hack to name_search() to make it stop searching after it determines there is an ambiguity. (check-in: ae640886 user: stephan tags: trunk)

Changes to src/blob.c.

Changes to src/login.c.

Changes to src/xfer.c.