NetworkManager/src
Beniamino Galvani eb784c3f27 supplicant: properly validate blobs
The purpose of the validation is to check that we pass to the
supplicant a configuration that it can understand. For certificates
and keys we enforce a maximum length of 64KiB; that means that the
value of the property we send (i.e. the file path or the blob id) can
be at most 64KiB. Instead we wrongly checked the size of the blob
data.

Fix the validation. Also, enforce a maximum blob size of 32MiB.

Fixes: e85cc46d0b ('core: pass certificates as blobs to supplicant for private connections')
2026-01-07 18:20:43 +01:00
..
c-list c-list: re-import git-subtree for 'src/c-list' 2022-07-19 09:02:36 +02:00
c-rbtree c-rbtree: re-import git-subtree for 'src/c-rbtree' 2022-11-23 18:00:31 +01:00
c-siphash c-siphash: re-import git-subtree for 'src/c-siphash' 2022-11-23 18:00:33 +01:00
c-stdaux c-stdaux: re-import git-subtree for 'src/c-stdaux' 2023-03-03 13:40:38 +01:00
contrib contrib/nm-vpn-plugin-utils: add nm_vpn_plugin_utils_get_cert_path() 2025-07-09 15:06:51 +02:00
core supplicant: properly validate blobs 2026-01-07 18:20:43 +01:00
libnm-base connectivity: add per-device check-connectivity setting 2025-12-02 10:04:20 +01:00
libnm-client-aux-extern nmcli: add support for managing wireguard peers 2025-06-16 13:20:02 +02:00
libnm-client-impl libnm: add function to copy a certificate or key as user 2025-12-12 12:43:15 +01:00
libnm-client-public libnm, nmcli: introduce new "prefix-delegation" setting 2025-04-02 11:21:59 +02:00
libnm-client-test typo fix: allows to -> allows one to 2025-03-26 19:22:01 +01:00
libnm-core-aux-extern nmcli: add support for managing wireguard peers 2025-06-16 13:20:02 +02:00
libnm-core-aux-intern aux-intern: add explicit cast for strchr() 2025-12-04 11:51:28 +00:00
libnm-core-impl libnm: add function to copy a certificate or key as user 2025-12-12 12:43:15 +01:00
libnm-core-intern core,libnm-core: introduce property flag for certificate and keys 2025-12-12 12:38:50 +01:00
libnm-core-public libnm: add function to copy a certificate or key as user 2025-12-12 12:43:15 +01:00
libnm-crypto Updated code format 2024-04-08 06:35:20 +00:00
libnm-glib-aux libnm-glib-aux: add temp name argument to nm_utils_file_set_contents() 2025-10-22 09:56:39 +02:00
libnm-lldp format: run nm-code-format 2024-10-04 11:07:35 +02:00
libnm-log-core all: code format 2025-05-13 11:43:33 +02:00
libnm-log-null
libnm-platform mptcp: add 'laminar' endpoint support 2025-11-19 12:54:09 +00:00
libnm-std-aux std-aux: use _nm_strerror_r 2025-12-12 15:07:53 +01:00
libnm-systemd-core dhcp6: fix accessor macro for t2 2025-07-23 11:00:13 +02:00
libnm-systemd-shared systemd: selectively backport "Fix constness issues with newer glibc" 2025-12-04 11:51:28 +00:00
libnm-udev-aux nm-udev-utils: constify strstr-output variable 2025-12-04 11:51:28 +00:00
libnmc-base wwan: retry after no operator code 2025-10-10 08:16:57 -04:00
libnmc-setting libnm-core: fix the documentation of the gateway IP property 2025-12-04 16:40:07 +01:00
libnmt-newt nmtui: handle write() errors correctly in nmt_newt_edit_string 2024-06-28 10:58:11 +00:00
linux-headers mptcp: add 'laminar' endpoint support 2025-11-19 12:54:09 +00:00
n-acd n-acd: re-import git-subtree for 'src/n-acd' 2025-10-22 20:09:16 +02:00
n-dhcp4 n-dhcp4: re-import git-subtree for 'src/n-dhcp4' 2025-10-22 20:09:41 +02:00
nm-cloud-setup cloud-setup: configure disconnected wired devices on OCI 2025-04-11 11:44:05 +02:00
nm-compat-headers all: add src/nm-compat-headers for patching included system headers 2022-09-23 11:43:33 +02:00
nm-dispatcher all: code format 2025-05-13 11:43:33 +02:00
nm-helpers libnm: add function to copy a certificate or key as user 2025-12-12 12:43:15 +01:00
nm-initrd-generator initrd: remove const qualifier from temporary variable 2025-12-04 11:51:28 +00:00
nm-online all: use NM_MAX() instead of MAX() 2023-11-15 09:32:21 +01:00
nmcli nmcli: start the agent only after updating the connection 2025-12-17 10:55:51 +01:00
nmtui nmtui/editor: hide "device" field for loopback connections 2025-04-15 11:43:06 +00:00
tests meson: specify project version with the -dev and -rc suffixes 2026-01-07 10:25:56 +00:00
meson.build helpers: move helper programs to the same directory 2025-12-12 12:38:48 +01:00
README.md

src/

Most of the subdirectories are static helper libraries, which get linked into one of the final build artifacts (like libnm, nmcli or NetworkManager). Static libraries are internal API.

The only public API is libnm, which is a shared library provided client implementations.

Our own clients (like nmcli and nmtui) also use libnm, the shared library. But they also use additional static helper libraries.

The daemon statically links against a part of libnm, the part that provides connection profiles. That is libnm-core. libnm-core is thus statically linked with libnm and the daemon. It does not get linked by clients that already link with libnm (like nmtui).

Read the individual README.md files in the subdirectories for details:

Directory Description
core/ the NetworkManager daemon
nmcli/ nmcli application, a command line client for NetworkManager
nmtui/ nmtui application, a text UI client for NetworkManager
nm-cloud-setup/ service to automatically configure NetworkManager in cloud environment
nm-initrd-generator/ generates NetworkManager configuration by parsing kernel command line options for dracut/initrd
nm-dispatcher/ NetworkManager-dispatcher service to run user scripts
nm-online/ application which checks whether NetworkManager is done, for implementing NetworkManager-wait-online.service
nm-priv-helper/ internal service for privileged operations
nm-daemon-helper/ internal helper binary spawned by NetworkManager
libnm-std-aux/ internal helper library for standard C
libnm-glib-aux/ internal helper library for glib
libnm-log-null/ internal helper library with dummy (null) logging backend
libnm-log-core/ internal helper library with logging backend (syslog) used by daemon
libnm-base/ internal helper library with base definitions
libnm-platform/ internal helper library for netlink and other platform/kernel API
libnm-udev-aux/ internal helper library for libudev
libnm-core-public/ public API of libnm (libnm-core part)
libnm-core-intern/ internal API of libnm-core, used by libnm and daemon
libnm-core-impl/ implementation of libnm-core
libnm-core-aux-intern/ internal helper library on top of libnm-core (used by libnm-core itself)
libnm-core-aux-extern/ internal helper library on top of libnm-core (not used by libnm-core)
libnm-client-public/ public API of libnm (NMClient part)
libnm-client-impl/ implementation of libnm (NMClient)
libnm-client-aux-extern/ internal helper library on top of libnm (not used by libnm itself)
libnmc-base/ internal helper library for libnm clients
libnmc-setting/ internal helper library for setting connection profiles (used by nmcli)
libnmt-newt/ internal helper library for libnewt for nmtui
linux-headers/ extra Linux kernel UAPI headers
contrib/ sources that are not used by NetworkManager itself
tests/ unit tests that are not specific to one of the other directories
libnm-client-test/ internal helper library with test utils for libnm
c-list/ fork of c-util helper library for intrusive, doubly linked list
c-rbtree/ fork of c-util helper library for intrusive Red-Black Tree
c-siphash/ fork of c-util helper library for SIPHash24
c-stdaux/ fork of c-util general purpose helpers for standard C
n-acd/ fork of nettools IPv4 ACD library
n-dhcp4/ fork of nettools DHCPv4 library
libnm-systemd-core/ fork of systemd code as network library
libnm-systemd-shared/ fork of systemd code as general purpose library