Updated copyright notices to include the year 2018.

auth: Support secured=tls

auth: Support client_id variable When imap_id_retain is turned on, contains the client ID request content with dovecot special vars removed.

Updated copyright notices to include the year 2017.

global: Replaced all instances of memset(p, 0, sizeof(*p)) with the new i_zero() macro. Used the following script: C_FILES=`git ls-files *.c` H_FILES=`git ls-files *.h` for F in "$C_FILES $H_FILES"; do echo "$F" perl -p -i -e 's/safe_memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero_safe(&$1)/g' $F perl -p -i -e 's/safe_memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero_safe($1)/g' $F perl -p -i -e 's/memset\(&\(?([^,]*)\)?,\s*0,\s*sizeof\(\g1\)\)/i_zero(&$1)/g' $F perl -p -i -e 's/memset\(([^,]*),\s*0,\s*sizeof\(\*\g1\)\)/i_zero($1)/g' $F done

global: Make sure *_malloc() calculations won't cause integer overflows.

auth: Don't crash expanding %variables when username isn't set. This continues the auth-policy fix in c3d3faa4f72a676e183f34be960cff13a5a725ae

lib: API change - var_expand_func_table.func() can now return error. None of the existing functions were changed to return errors (yet).

lib: API change - var_expand*() now returns error string. This allows callers to fail properly if the format string is invalid.

global: Use i_strchr_to_next() wherever useful.

auth: Pass local_name to auth-request This allows using local_name in various places, such as passdb/userdb queries.

auth: Code cleanup - use const for struct auth_request.

auth-policy: Hook auth policy to auth code

auth-policy: Add policy implementation

Use t_new in complicated t_malloc_no0 calls

Remove t_malloc in favour of t_malloc_no0 Using either t_malloc_no0 or t_malloc0 makes it clear whether the allocated memory is zeroed or not.

auth: Added %{auth_user/username/domain} variables

global: freshen copyright git ls-files | xargs perl -p -i -e 's/(\d+)-201[0-5]/$1-2016/g;s/ (201[0-5]) Dovecot/ $1-2016 Dovecot/'

auth: Fixed crash when using %{passdb:} or %{userdb:} functions when escape_func was NULL Patch by Michael Slusarz.

auth: Added %{passdb:field} and %{userdb:field} variables The field expands to either the passdb or userdb extra field. You can also use %{passdb:field:defaultvalue} where if field doesn't exist, it's expanded to defaultvalue. Note that an empty value means that the field still exists and it's not expanded to defaultvalue.

auth: Make sure %{mech} and %{session} is escaped in %var expansion. %{mech} is already very trusted and %{session} should be only from trusted sources as well, so this doesn't fix any actual security holes. They are also unlikely to have ever even been used in anything that requires escaping.

auth: Moved var_expand() related code to its own file.