ladybird/Userland/Libraries/LibCore
Brian Gianforcaro 3ab2b90744 LibCore: Use timing_safe_compare to compare password hash values
This is not strictly required, as we are comparing hashes, not the
password it self. However given this is generic code that could be
used anywhere in the system, it seems prudent to be cautious and
make sure we don't inadvertently leak any information about the hash
via timing attacks in future usages of `LibCore::Account`.

Reported-by: Jessica Hamilton <jessica.l.hamilton@gmail.com>
2022-03-13 19:08:58 -07:00
..
Account.cpp LibCore: Use timing_safe_compare to compare password hash values 2022-03-13 19:08:58 -07:00
Account.h LibCore+id: Make more use of Core::System wrappers in Core::Account 2022-01-02 18:08:02 +01:00
AnonymousBuffer.cpp LibCore: Convert AnonymousBuffer to use System::anon_create 2022-02-10 21:35:17 +01:00
AnonymousBuffer.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
ArgsParser.cpp ArgsParser: Add support for Optional<size_t> 2022-02-17 09:08:40 -05:00
ArgsParser.h ArgsParser: Add support for Optional<size_t> 2022-02-17 09:08:40 -05:00
CMakeLists.txt Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Command.cpp LibCore: Make Core::command return CommandResult struct 2022-01-12 14:55:19 +01:00
Command.h LibCore: Make Core::command return CommandResult struct 2022-01-12 14:55:19 +01:00
ConfigFile.cpp LibCore: Migrate ConfigFile to Core::Stream API :^) 2022-02-16 19:49:41 -05:00
ConfigFile.h LibCore: Migrate ConfigFile to Core::Stream API :^) 2022-02-16 19:49:41 -05:00
DateTime.cpp LibCore: Use altzone for the current time zone offset during DST 2022-03-13 17:50:49 +01:00
DateTime.h LibCore: Change DateTime format strings to be StringViews 2022-01-28 20:19:05 +00:00
DeferredInvocationContext.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
DirIterator.cpp Userland: Fail Core::find_executable_in_path on empty inputs 2022-01-04 07:38:42 +00:00
DirIterator.h LibCore: Allow moving, but not copying, DirIterator 2021-11-23 22:58:05 +01:00
ElapsedTimer.cpp LibCore: Add ElapsedTimer::reset() 2021-10-28 11:21:18 +02:00
ElapsedTimer.h LibCore: Add ElapsedTimer::reset() 2021-10-28 11:21:18 +02:00
Event.cpp Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Event.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
EventLoop.cpp LibCore: Verify that EventLoop is initialized in its static API 2022-03-10 18:09:27 -08:00
EventLoop.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
File.cpp LibCore: Do not skip dotfiles when copying directories recursively 2022-03-08 23:30:47 +01:00
File.h Everywhere: Move shared library checks into a common function 2021-11-10 14:42:49 +01:00
FilePermissionsMask.cpp LibCore: Improve handling of parsing errors in FilePermissionsMask 2022-01-24 07:50:32 +00:00
FilePermissionsMask.h LibCore: Add FilePermissionsMask 2022-01-01 17:33:43 +00:00
FileStream.h LibCore: Use ErrorOr<T> for Core::File::open() 2021-11-08 00:35:27 +01:00
FileWatcher.cpp LibCore: Replace Result<T, E> use with ErrorOr<T> in Core::FileWatcher 2021-11-08 00:35:27 +01:00
FileWatcher.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Forward.h Core: Remove non-existent classes from Forward.h 2022-02-18 23:31:28 +00:00
GetPassword.cpp LibCore: Use LibCore syscall wrappers in get_password() 2021-11-30 23:34:40 +01:00
GetPassword.h LibCore: Use ErrorOr<T> for Core::get_password() 2021-11-08 00:35:27 +01:00
Group.cpp LibCore: Do not leak FILE pointer in Group::add_group() 2022-01-21 18:34:24 +01:00
Group.h LibCore: Use generic AK_OS_BSD_GENERIC to hide Group::add_group() 2022-01-21 18:34:24 +01:00
InputBitStream.h Everywhere: Convert ByteBuffer factory methods from Optional -> ErrorOr 2022-01-24 22:36:09 +01:00
IODevice.cpp Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
IODevice.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
LocalServer.cpp LibCore: Remove Core::LocalSocket :^) 2022-02-06 10:28:19 +01:00
LocalServer.h LibCore+LibIPC+Everywhere: Return Stream::LocalSocket from LocalServer 2022-01-15 13:29:48 +03:30
LockFile.cpp Everywhere: Use my cool new @serenityos.org email address 2021-09-01 11:37:25 +04:30
LockFile.h Everywhere: Use my cool new @serenityos.org email address 2021-09-01 11:37:25 +04:30
MappedFile.cpp LibCore: Use open() wrapper in Core::MappedFile :^) 2021-11-23 12:23:54 +01:00
MappedFile.h LibCore+AK: Move MappedFile from AK to LibCore 2021-11-23 11:33:36 +01:00
MemoryStream.h LibCore+Tests: Add SeekableStream::truncate() 2022-02-16 19:49:41 -05:00
MimeData.cpp LibCore: Add support for application/zip mime-type 2022-03-08 22:38:53 +01:00
MimeData.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
NetworkJob.cpp Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
NetworkJob.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
NetworkResponse.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Notifier.cpp LibCore: Remove unused header includes 2021-08-01 08:10:16 +02:00
Notifier.h Everything: Move to SPDX license identifiers in all files. 2021-04-22 11:22:27 +02:00
Object.cpp Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Object.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Process.cpp LibCore: Explicitly declare environ in Process.cpp to unbreak macOS 2021-08-06 01:29:09 +02:00
Process.h LibCore: Add Core::Process::spawn() 2021-08-06 01:04:11 +02:00
ProcessStatisticsReader.cpp AK: Make JSON parser return ErrorOr<JsonValue> (instead of Optional) 2021-11-17 00:21:10 +01:00
ProcessStatisticsReader.h Everywhere: Make tracking cpu usage independent from system ticks 2021-07-18 22:08:26 +02:00
Promise.h Libraries: Fix visibility of Object-derivative constructors 2021-11-02 22:56:53 +01:00
Property.cpp Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Property.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
SecretString.cpp Everywhere: Convert ByteBuffer factory methods from Optional -> ErrorOr 2022-01-24 22:36:09 +01:00
SecretString.h LibCore: Add SecretString, a buffer that is zero'd on destruction 2021-09-12 16:36:52 +02:00
SocketAddress.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
StandardPaths.cpp Everything: Move to SPDX license identifiers in all files. 2021-04-22 11:22:27 +02:00
StandardPaths.h Everything: Move to SPDX license identifiers in all files. 2021-04-22 11:22:27 +02:00
Stream.cpp LibCore: Make FreeBSD build SerenityOS 2022-02-17 09:26:56 +00:00
Stream.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
System.cpp LibCore: Add wrapper for posix_openpt(), grantpt() and unlockpt() 2022-03-02 18:08:05 +01:00
System.h LibCore: Add wrapper for posix_openpt(), grantpt() and unlockpt() 2022-03-02 18:08:05 +01:00
SystemServerTakeover.cpp LibCore+LibIPC: Move SystemServerTakeover.{h,cpp} to LibCore 2022-02-06 10:28:19 +01:00
SystemServerTakeover.h LibCore+LibIPC: Move SystemServerTakeover.{h,cpp} to LibCore 2022-02-06 10:28:19 +01:00
TCPServer.cpp LibCore+Userland: Remove Core::TCPSocket :^) 2022-02-06 17:28:17 +00:00
TCPServer.h LibCore+Userland+Tests: Convert Stream APIs to construct on heap 2022-01-13 15:16:12 +03:30
TempFile.cpp Userland: Remove a bunch of unnecessary Vector imports 2022-01-28 23:40:25 +01:00
TempFile.h LibCore: Add utility class for temporary files and directories 2022-01-12 14:55:19 +01:00
Timer.cpp Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
Timer.h Libraries: Use default constructors/destructors in LibCore 2022-03-10 18:04:26 -08:00
UDPServer.cpp Everywhere: Convert ByteBuffer factory methods from Optional -> ErrorOr 2022-01-24 22:36:09 +01:00
UDPServer.h LibCore+LookupServer: Implement and use UDPServer::send 2021-12-16 22:21:35 +03:30
UmaskScope.h LibCore: Add Core::UmaskScope to set and unset a temporary umask 2022-01-02 18:08:02 +01:00
Version.cpp LibCore+Everywhere: Return ErrorOr from ConfigFile factory methods 2022-02-16 19:49:41 -05:00
Version.h LibCore: Refactor a version-reading utility 2021-09-02 16:17:18 +01:00