Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
223 commits 28 branches 35 tags 23 MiB
Commit graph

19 commits

Author SHA1 Message Date
dachshund
8edf2fc3f5 Removed an unsafe edge case, but updater unit tests need to be fixed. 
Specifically, we do not intentionally set any file metadata to be None
and then download the file unsafely.

Some of the tuf.client.updater unit tests fail because it was previously
possible to unsafely download metadata for any role. We need to fix
this.
 2013-08-06 14:31:21 -04:00
dachshund
3c18b58b71 Adapt Zheng Yuyu's changes. 2013-08-06 13:40:24 -04:00
zhengyuyu
0c83799c85 Fix the endless data attack issue 
modification of updater.py for download.py

modification of conf.py for fix

modification of test_download.py for download.py

modification of test_updater.py for download.py

add a new test of endless data attack to metadata timestamp.txt

more readable and fix the endless data attack issue.
 2013-08-02 16:32:55 -04:00
dachshund
a559727398 Fast test for breach of delegation. 2013-07-08 09:11:25 +08:00
dachshund
b40191ba1f Restructing of delegations integration test. 2013-06-30 12:19:44 +08:00
dachshund
c138b67828 Ensure that we explore only delegated roles trusted with the desired target. 2013-06-24 18:35:17 +08:00
dachshund
47abec8cde Find target in order of trust. 2013-06-23 10:36:21 +08:00
dachshund
688b0e21ca WIP on adjusting tuf.client.updater to use list of roles. 2013-06-22 16:23:52 +08:00
dachshund
cab37422b3 Merge remote-tracking branch 'origin/master' 2013-04-15 21:40:45 -04:00
dachshund
1367deda09 Kludges to work around #61. 2013-04-15 21:40:09 -04:00
Kon
420c1abd04 Fix for metadata mix-and-match vulnerability. 2013-04-13 15:49:38 -04:00
dachshund
753f318990 Deduplicate imports of delegations. 2013-04-12 16:41:14 -04:00
dachshund
6ba28037b4 Fix bug which induced erroneous delegations. 2013-04-11 08:27:11 -04:00
dachshund
286e8d9579 Fix typo which led to subtle bug. 2013-04-11 01:00:30 -04:00
Kon
3b253d6496 Completed test_extraneous_dependencies_attack.py, changes to updater.py need to be reviewed. 2013-03-27 10:58:54 -04:00
vladdd
15f99719a2 Fix incomplete exception name in updater.py 2013-03-16 17:01:26 -04:00
vladdd
86eb96da55 Fix for issues #36 and #37 2013-03-15 18:42:04 -04:00
vladdd
d2a799f73f Update affected module following review of util.py and test_util.py. 2013-02-13 10:57:01 -05:00
vladdd
abf0349b05 Move all files up one directory from 'src/'. 2013-02-10 21:38:06 -05:00