mirror of
https://github.com/OpenVPN/openvpn3.git
synced 2024-09-20 04:02:15 +02:00
dde1574596
This is the result after running 'clang-format -i' on all C++ files and headers, with the defined formatting rules in .clang-format. Only the openvpn/common/unicode-impl.hpp has been excluded, as that is mostly a copy of an external project. Signed-off-by: David Sommerseth <davids@openvpn.net>
110 lines
2.9 KiB
C++
110 lines
2.9 KiB
C++
// OpenVPN -- An application to securely tunnel IP networks
|
|
// over a single port, with support for SSL/TLS-based
|
|
// session authentication and key exchange,
|
|
// packet encryption, packet authentication, and
|
|
// packet compression.
|
|
//
|
|
// Copyright (C) 2012-2022 OpenVPN Inc.
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License Version 3
|
|
// as published by the Free Software Foundation.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program in the COPYING file.
|
|
// If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
// Sanitize certain kinds of strings before they are output to the log file.
|
|
|
|
#ifndef OPENVPN_OPTIONS_SANITIZE_H
|
|
#define OPENVPN_OPTIONS_SANITIZE_H
|
|
|
|
#include <string>
|
|
#include <cstring>
|
|
|
|
#include <openvpn/common/exception.hpp>
|
|
#include <openvpn/common/options.hpp>
|
|
|
|
namespace openvpn {
|
|
|
|
inline std::string render_options_sanitized(const OptionList &opt, const unsigned int render_flags)
|
|
{
|
|
std::ostringstream out;
|
|
for (size_t i = 0; i < opt.size(); i++)
|
|
{
|
|
const Option &o = opt[i];
|
|
#ifndef OPENVPN_SHOW_SESSION_TOKEN
|
|
if (o.get_optional(0, 0) == "auth-token")
|
|
out << i << " [auth-token] ..." << std::endl;
|
|
else
|
|
#endif
|
|
out << i << ' ' << o.render(render_flags) << std::endl;
|
|
}
|
|
return out.str();
|
|
}
|
|
|
|
// Remove security-sensitive strings from control message
|
|
// so that they will not be output to log file.
|
|
inline std::string sanitize_control_message(const std::string &src_str)
|
|
{
|
|
#ifdef OPENVPN_SHOW_SESSION_TOKEN
|
|
return src_str;
|
|
#else
|
|
const char *src = src_str.c_str();
|
|
char *ret = new char[src_str.length() + 1];
|
|
char *dest = ret;
|
|
bool redact = false;
|
|
int skip = 0;
|
|
|
|
for (;;)
|
|
{
|
|
const char c = *src;
|
|
if (c == '\0')
|
|
break;
|
|
if (c == 'S' && !::strncmp(src, "SESS_ID_", 8))
|
|
{
|
|
skip = 7;
|
|
redact = true;
|
|
}
|
|
else if (c == 'e' && !::strncmp(src, "echo ", 5))
|
|
{
|
|
skip = 4;
|
|
redact = true;
|
|
}
|
|
|
|
if (c == ',') /* end of redacted item? */
|
|
{
|
|
skip = 0;
|
|
redact = false;
|
|
}
|
|
|
|
if (redact)
|
|
{
|
|
if (skip > 0)
|
|
{
|
|
--skip;
|
|
*dest++ = c;
|
|
}
|
|
}
|
|
else
|
|
*dest++ = c;
|
|
|
|
++src;
|
|
}
|
|
*dest = '\0';
|
|
|
|
const std::string ret_str(ret);
|
|
delete[] ret;
|
|
return ret_str;
|
|
#endif
|
|
}
|
|
|
|
} // namespace openvpn
|
|
|
|
#endif
|