git-annex

Author	SHA1	Message	Date
Joey Hess	8484c0c197	Always use filesystem encoding for all file and handle reads and writes. This is a big scary change. I have convinced myself it should be safe. I hope!	2016-12-24 14:46:31 -04:00
Joey Hess	e08691b393	enable-tor: When run as a regular user, test a connection back to the hidden service over tor. This way we know that after enable-tor, the tor hidden service is fully published and working, and so there should be no problems with it at pairing time. It has to start up its own temporary listener on the hidden service. It would be nice to have it start the remotedaemon running, so that extra step is not needed afterwards. But, there may already be a remotedaemon running, in communication with the assistant and we don't want to start another one. I thought about trying to HUP any running remotedaemon, but Windows does not make it easy to do that. In any case, having the user start the remotedaemon themselves lets them know it needs to be running to serve the hidden service. This commit was sponsored by Boyd Stephen Smith Jr. on Patreon.	2016-12-24 12:50:23 -04:00
Joey Hess	f3a4b9191c	refactor	2016-12-24 12:14:14 -04:00
Joey Hess	22252e8e4c	Revert "close" This reverts commit `3aaabc906b`. Commit contained incomplete work.	2016-12-24 12:07:15 -04:00
Joey Hess	3aaabc906b	close	2016-12-22 13:59:21 -04:00
Joey Hess	16c6333f09	fix build with old ghc	2016-12-10 11:12:18 -04:00
Joey Hess	52ccd44812	avoid exposing auth tokens in debug	2016-12-09 16:55:48 -04:00
Joey Hess	217c3b0a21	debug dump P2P messages	2016-12-09 16:45:36 -04:00
Joey Hess	15be5c04a6	git-annex-shell, remotedaemon, git remote: Fix some memory DOS attacks. The attacker could just send a very lot of data, with no \n and it would all be buffered in memory until the kernel killed git-annex or perhaps OOM killed some other more valuable process. This is a low impact security hole, only affecting communication between local git-annex and git-annex-shell on the remote system. (With either able to be the attacker). Only those with the right ssh key can do it. And, there are probably lots of ways to construct git repositories that make git use a lot of memory in various ways, which would have similar impact as this attack. The fix in P2P/IO.hs would have been higher impact, if it had made it to a released version, since it would have allowed DOSing the tor hidden service without needing to authenticate. (The LockContent and NotifyChanges instances may not be really exploitable; since the line is read and ignored, it probably gets read lazily and does not end up staying buffered in memory.)	2016-12-09 13:34:32 -04:00
Joey Hess	af41519126	convert P2P runners from Maybe to Either String So we get some useful error messages when things fail. This commit was sponsored by Peter Hogg on Patreon.	2016-12-08 15:47:49 -04:00
Joey Hess	c05f4eb631	fix laziness problem in git relaying The switch to hGetMetered subtly changed the laziness of how DATA was read, and broke git protocol relaying. Fix by sending received data to the git process's stdin immediately, which ensures that the lazy bytestring is all read from the peer before going on to process the next message from the peer.	2016-12-08 15:15:29 -04:00
Joey Hess	ad5ef51040	more p2p progress meters Display progress meter on send and receive from remote. Added a new hGetMetered that can read an exact number of bytes (or less), updating a meter as it goes. This commit was sponsored by Andreas on Patreon.	2016-12-07 14:25:01 -04:00
Joey Hess	83ea1cec86	update progress meter when sending to p2p remote This commit was sponsored by Thom May on Patreon.	2016-12-07 13:37:35 -04:00
Joey Hess	bb5168e894	need to auth with the peer	2016-12-06 15:50:02 -04:00
Joey Hess	f744bd5391	refactor	2016-12-06 15:43:03 -04:00
Joey Hess	c29f2e262a	catch non-IO exceptions too	2016-12-02 14:16:50 -04:00
Joey Hess	15dc63d47f	make sure that the specified number of bytes of DATA are always sent It's possible, in direct or thin mode, that an object file gets truncated or appended to as it's being sent. This would break the protocol badly, so make sure never to send too many bytes, and to close the protocol connection if too few bytes are available.	2016-12-02 13:45:45 -04:00
Joey Hess	3dce6a080e	cleanups	2016-12-01 00:42:01 -04:00
Joey Hess	94dad1e979	more flexible types for Proto runners This will allow a runner in the Annex monad.	2016-12-01 00:27:07 -04:00
Joey Hess	00f48ac407	better comments	2016-11-30 23:54:00 -04:00
Joey Hess	e714e0f67a	actually check p2p authtokens for tor connections This commit was sponsored by Ethan Aubin.	2016-11-30 16:46:02 -04:00
Joey Hess	3ed8895a09	fix build	2016-11-24 16:36:16 -04:00
Joey Hess	b08799893f	reorg	2016-11-22 14:37:09 -04:00

23 commits