1734 Commits (cdeb2052bb4feebc2566bf03a9316cd4e21040b3)

Author	SHA1	Message	Date
Bjoern Schiessle	9dd517071e	fix check if file is excluded from encryption	11 years ago
Joas Schilling	dfed287dc0	Use insertIfNotExists to avoid problems with parallel calls	11 years ago
Joas Schilling	39497b9c3a	Add a test for parallel insert	11 years ago
Joas Schilling	2916b0ba76	Always test the object and the legacy class	11 years ago
Bjoern Schiessle	0d5c7a11e2	use hooks to update encryption keys instead of the storage wrapper if a file gets renamed/restored, as long as we ... are in the storage wrapper the file cache isn't up-to-date	11 years ago
Andreas Fischer	4f6ecd3da6	\OC\Connector\Sabre\CopyEtagHeaderPlugin constructor does not take arguments.	11 years ago
Joas Schilling	aea734aaf1	Fix missing types on doc block and deduplicate the method name	11 years ago
Bjoern Schiessle	dc39bda870	move/copy from storage	11 years ago
Bjoern Schiessle	83ed4ee5b6	unit tests	11 years ago
Bjoern Schiessle	7089af96f2	make sure that we keep the correct encrypted-flag and the (unencrypted)size if a file gets copied	11 years ago
Morris Jobke	493844eda4	add positive tests for operator in code checker	11 years ago
Thomas Müller	aae098c24a	Check usage of != and == - refs #16054	11 years ago
Robin Appelman	ba7d221cff	allow getting the path from the lockedexception	11 years ago
Robin Appelman	8119b8b040	add tests for castrait	11 years ago
Robin Appelman	96f9573a4b	add memcache based shared/exclusive locking	11 years ago
Robin Appelman	acf30ede95	add compare and swap to memcache	11 years ago
Robin Appelman	29213b6136	extends memcache with add, inc and dec	11 years ago
Joas Schilling	cf4a6874fb	Allow setting protected properties	11 years ago
Joas Schilling	31b65749dd	Allow setting protected properties	11 years ago
Joas Schilling	09d479e79d	Add a test to share a subfolder of a folder shared with the owner by group	11 years ago
Lukas Reschke	34d0e610cc	Filter potential dangerous filenames for avatars ... We don't want to have users misusing this API resulting in a potential file disclosure of "avatar.(jpg|png)" files.	11 years ago
Joas Schilling	b55ef51a27	Add tests for the correct share id on the call aswell	11 years ago
Roeland Jago Douma	02269b6464	Added unit test	11 years ago
Joas Schilling	02c60949dd	make scrutinizer happy	11 years ago
Joas Schilling	d146c13abd	Add tests for the remote sharing url	11 years ago
Thomas Müller	936d564058	fixes #15848	11 years ago
Robin Appelman	6bf0579622	fix test	11 years ago
Robin Appelman	be55a90323	dont use our now non existing hook	11 years ago
Bjoern Schiessle	27683f9442	fall back to the ownCloud default encryption module and aes128 if we read a encrypted file without a header	11 years ago
Joas Schilling	8f61fbb81f	Fix new tests	11 years ago
Joas Schilling	d600955a51	Make getDefaultModuleId public and get module protected	11 years ago
Joas Schilling	4e97228cde	Deduplicate module mock	11 years ago
Joas Schilling	4b7ae395f2	Add test for setDefaultEncryptionModule	11 years ago
Joas Schilling	b35379515c	Add a test that the default module is returned before we fall back	11 years ago
Bjoern Schiessle	9a5783b284	fix unit tests	11 years ago
jknockaert	4554df2512	enable testWriteWriteRead	11 years ago
jknockaert	18a1225b0c	enable testRewind	11 years ago
jknockaert	27ea23ea6b	Update encryption.php	11 years ago
jknockaert	d6841aa706	disable r+ test	11 years ago
jknockaert	7a34f75da6	add two tests ... testRewind tests reading and writing after rewind on an encrypted stream; testWriteWriteRead tests r+ mode	11 years ago
Joas Schilling	411f7893bf	Add test "operation on keys failed"	11 years ago
Joas Schilling	781cfff221	Deduplicate data provider and fix method visibility	11 years ago
Bjoern Schiessle	24128d1384	only update share keys if the file was encrypted	11 years ago
Bjoern Schiessle	2646bccb83	update share keys if file gets copied	11 years ago
Bjoern Schiessle	2990b0e07e	update share keys if a file is moved to a shared folder	11 years ago
Lukas Reschke	ab9ea97d3a	Catch not existing User-Agent header ... In case of an not sent UA header consider the client as valid	11 years ago
Lukas Reschke	155ae44bc6	Fix collision on temporary files + adjust permissions ... This changeset hardens the temporary file and directory creation to address multiple problems that may lead to exposure of files to other users, data loss or other unexpected behaviour that is impossible to debug. **[CWE-668: Exposure of Resource to Wrong Sphere](https://cwe.mitre.org/data/definitions/668.html)** The temporary file and folder handling as implemented in ownCloud is performed using a MD5 hash over `time()` concatenated with `rand()`. This is insufficiently and leads to the following security problems: The generated filename could already be used by another user. It is not verified whether the file is already used and thus temporary files might be used for another user as well resulting in all possible stuff such as "user has file of other user". Effectively this leaves us with: 1. A timestamp based on seconds (no entropy at all) 2. `rand()` which returns usually a number between 0 and 2,147,483,647 Considering the birthday paradox and that we use this method quite often (especially when handling external storage) this is quite error prone and needs to get addressed. This behaviour has been fixed by using `tempnam` instead for single temporary files. For creating temporary directories an additional postfix will be appended, the solution is for directories still not absolutely bulletproof but the best I can think about at the moment. Improvement suggestions are welcome. **[CWE-378: Creation of Temporary File With Insecure Permissions](https://cwe.mitre.org/data/definitions/378.html)** Files were created using `touch()` which defaults to a permission of 0644. Thus other users on the machine may read potentially sensitive information as `/tmp/` is world-readable. However, ownCloud always encourages users to use a dedicated machine to run the ownCloud instance and thus this is no a high severe issue. Permissions have been adjusted to 0600. **[CWE-379: Creation of Temporary File in Directory with Incorrect Permissions](https://cwe.mitre.org/data/definitions/379.html)** Files were created using `mkdir()` which defaults to a permission of 0777. Thus other users on the machine may read potentially sensitive information as `/tmp/` is world-readable. However, ownCloud always encourages users to use a dedicated machine to run the ownCloud instance and thus this is no a high severe issue. Permissions have been adjusted to 0700.Please enter the commit message for your changes.	11 years ago
Vincent Petry	b88d0ba0ac	Delete temp files after testing encryption stream wrapper	11 years ago
Thomas Müller	225cde2183	pass KeyStorage via ctor	11 years ago
Thomas Müller	987bc138df	calling renameKeys() on directory level as well - fixes #15778	11 years ago