summaryrefslogtreecommitdiff
path: root/src/core
AgeCommit message (Collapse)Author
2017-07-29Reorder functions.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Config file support for "capsicum" parameter.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29/connect works - although only with IP addresses.Edward Tomasz Napierala
2017-07-29Rename to "/capability enter" and "/capability status".Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Add capability mode error/success messages.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Implement /cap_enter.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Consistency: use FALSE instead of 0.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29When rawlog open fails, there's no point in trying to write. Don't.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Add missing diagnostics for rawlog open().Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Don't compute log_dir_create_mode in three different places.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-05Merge branch 'fix-11' into 'security'Nei
Correct GHashTable usage See merge request !16
2017-07-05Merge branch 'fix-10' into 'security'Nei
Check return value of localtime See merge request !15
2017-07-04correct GHashTable usageailin-nemui
2017-07-03Merge pull request #653 from ailin-nemui/regexexailin-nemui
Enable UTF8 in GRegex
2017-06-29Check return value of localtimeNei
Fixes #10
2017-06-17parse_time_interval: Allow negative time in settingsdequis
This splits sign parsing out of parse_time_interval_uint() so that the negative sign is applied outside of the unsigned context where the number parsing is done, and after all the checks that it's lower than (1 << 31) This fixes issues with settings like `server_reconnect_time`, `server_connect_timeout` and `lag_max_before_disconnect`, which accepted -1 as a valid value.
2017-06-05get rid of new_textailin-nemui
2017-06-05Update iregex-gregex.cailin-nemui
add 2 comments about new_string
2017-06-05Update iregex-gregex.cailin-nemui
make helper functions static
2017-06-04Refactor regex and implement UTF8 mode for GRegexailin-nemui
- with non-unicode byte to Private Use Area A mapping - move all ifdefs to iregex.h file only
2017-05-18Add parse_uint function to improve integer overflow handlingdequis
Originally found by oss-fuzz (issue 525) in get_ansi_color using ubsan. After a lot of analysis I'm 99% sure this isn't security relevant so it's fine to handle this publicly. The fix is mainly adding a function that does it right and use it everywhere. This is harder than it seems because the strtol() family of functions doesn't have the friendliest of interfaces. Aside from get_ansi_color(), there were other pieces of code that used the same (out*10+(*in-'0')) pattern, like the parse_size() and parse_time_interval() functions, which are mostly used for settings. Those are interesting cases, since they multiply the parsed number (resulting in more overflows) and they write to a signed integer parameter (which can accidentally make the uints negative without UB) Thanks to Pascal Cuoq for enlightening me about the undefined behavior of parse_size (and, in particular, the implementation-defined behavior of one of the WIP versions of this commit, where something like signed integer overflow happened, but it was legal). Also for writing tis-interpreter, which is better than ubsan to verify these things.
2017-05-12expand macroailin-nemui
2017-05-12improve nicklist performanceailin-nemui
2017-03-31Fix off by one error with char_expandosJoseph Bisch
2017-03-08expand_escape: expand double backslash as a backslashdequis
2017-03-07Merge pull request #659 from ailin-nemui/foreach_dontspamailin-nemui
make foreach send commands
2017-03-06Revert "Quote the filename when dcc requests are auto accepted."ailin-nemui
2017-03-04Merge pull request #658 from LemonBoy/dcc-autoacceptailin-nemui
Quote the filename when dcc requests are auto accepted.
2017-03-04Properly check the command arguments in tail place.LemonBoy
A command requiring an argument and given in tail position would not raise an error but silently set the value to the empty string ''.
2017-02-27make foreach send commandsailin-nemui
2017-02-22Handle file names with quotes.LemonBoy
Let's repurpose escape_string and make it more flexible by letting us choose the characters to escape.
2017-02-15Merge pull request #627 from LemonBoy/ssl-expiryailin-nemui
Check whether the client certificate is expired.
2017-02-14Do not alias /server <hostname> to /server connect <hostname>LemonBoy
Closes #559.
2017-02-06Merge pull request #622 from ailin-nemui/starttlsailin-nemui
provide net_start_ssl api
2017-02-05provide net_start_ssl apiailin-nemui
fixes #615
2017-02-03Support OpenSSL 1.1.0.LemonBoy
- X509_get_notBefore becomes X509_get0_notBefore - X509_get_notAfter becomes X509_get0_notAfter - ASN1_STRING_data becomes ASN1_STRING_get0_data (and drops the const) - The whole library is now initialized by OPENSSL_init_ssl Closes #597
2017-01-22Check whether the client certificate is expired.LemonBoy
Right now we only warn the user, the connection keeps going. Fixes #211
2017-01-06Add OPENSSL_NO_EC for solaris 11.3, see issue #598dequis
Original patch by 'Slarky' According to that ticket, the next major version of solaris won't need this. Consider reverting this when solaris 11.3 stops being relevant.
2017-01-05fix GRegex GError problemailin-nemui
2017-01-03switch for gregex and regex.hAilin Nemui
2017-01-02Use the RAW flag when building the regexps.LemonBoy
Also, plugged a memory leak when retrieving the match position.
2017-01-02Rebase against master.LemonBoy
2017-01-02Remove the regexp_compiled field.LemonBoy
It was made redundant by the introduction of the pointer to the GRegex structure. Silence the compiler warning in textbuffer.c about preg being initialized by setting it to NULL.
2017-01-02Use GLib's regexp interface (backed by PCRE)LemonBoy
2016-12-08Merge pull request #570 from josephbisch/fix-issue-563ailin-nemui
enforce check that chatnets are nodelists to handle invalid config
2016-10-27enforce check that chatnets are nodelists to handle invalid configJoseph Bisch
2016-10-22Only do checks for SSL_get_server_tmp_key in network-openssl.c.Alexander Færøy
2016-10-22Kill do { ... } while (0); and replace it with goto's.Alexander Færøy
2016-10-22Emit the TLS handshake finished signal before we do verification.Alexander Færøy
This patch moves the emitted "tls handshake finished" signal to before we do validation of the given TLS certificate. This ensures that we display certificate information before we possibly error out and disconnects from the server.
2016-10-22Kill support for DANE.Alexander Færøy
This patch removes support for DANE validation of TLS certificates. There wasn't enough support in the IRC community to push for this on the majority of bigger IRC networks. If you believe this should be reintroduced into irssi, then please come up with an implementation that does not rely on the libval library. It is causing a lot of troubles for our downstream maintainers.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-21 21:41:37 +0000