summaryrefslogtreecommitdiff
path: root/src/irc
AgeCommit message (Collapse)Author
2017-10-20Merge branch 'fix-16' into 'security'Nei
Prevent a OOB read when parsing IRCNet ! channels See merge request irssi/irssi!22
2017-10-20Merge branch 'fix-gl-15' into 'security'Nei
Don't proceed with cmd_msg if there was an error splitting msg See merge request irssi/irssi!21
2017-10-20Merge branch 'fix-dcc' into 'security'Nei
fix dcc See merge request irssi/irssi!20
2017-10-20Make split functions return an array with NULL instead of NULLJoseph Bisch
This avoids undefined behavior in functions that call these split functions and expect an array back instead of just a NULL pointer.
2017-10-20Merge branch 'fix-gl-13' into 'security'Nei
Fix use after free when channel is destroyed inbetween being synced See merge request irssi/irssi!19
2017-10-20fix dcc issueailin-nemui
2017-10-19Prevent a OOB read when parsing IRCNet ! channelsLemonBoy
Make sure the string has enough data. Fixes #16
2017-10-14Changes based on comments in pull #771.Paul Townsend
2017-10-11Add alternate_nick as a network-specific property.Paul Townsend
2017-10-08Fix segfault in query_remove_allJoseph Bisch
It is possible for rec to be NULL in query_remove_all, resulting in a segfault. So return without doing anything if rec is NULL.
2017-10-08fix uaf in chanquery moduleailin-nemui
the chanquery needs to be removed in any case if a channel rec is destroyed, regardless of any state Fixes GL#13
2017-07-25Allow the user to clear the sasl-related fieldsLemonBoy
There was no easy way for the user to disable the SASL authentication or to clear the username/password once the network was created. Closes #718
2017-05-30Merge branch 'fix-gl9' into 'security'Nei
Fix dcc_request where addr is NULL See merge request !13
2017-05-29Fix dcc_request where addr is NULLJoseph Bisch
2017-05-29Fix oob read of one byte in get_file_params_count{,_resume}Joseph Bisch
We can use continue to handle cases such as: "ab<space><space>c"
2017-03-07fix dcc getailin-nemui
fixes #656
2017-03-06Revert "Quote the filename when dcc requests are auto accepted."ailin-nemui
2017-03-04Merge pull request #658 from LemonBoy/dcc-autoacceptailin-nemui
Quote the filename when dcc requests are auto accepted.
2017-02-22Handle file names with quotes.LemonBoy
Let's repurpose escape_string and make it more flexible by letting us choose the characters to escape.
2017-02-21Quote the filename when dcc requests are auto accepted.LemonBoy
PR #453 forces the user to quote the filenames given to /DCC commands when they contain spaces but the autoget functionality didn't get updated so the filename was always passed without quotes. Closes #656.
2017-02-11notify-ison: Don't send ison before the connection is donedequis
2017-01-24Prevent a memory leak during the processing of the SASL response.LemonBoy
We also get rid of an allocation in the process of doing so.
2017-01-10Revert "Don't reset wait_cmd during connection registration (fixes early ISON)"dx
2017-01-08Merge pull request #608 from tijko/masterLemonBoy
Follow g_strsplit with call to g_strfreev
2017-01-07Follow g_strsplit with call to g_strfreevTim Konick
2017-01-06Don't reset wait_cmd during connection registration (fixes early ISON)dequis
2017-01-03Merge branch 'master' into 'security'Nei
Sync to master See merge request !6
2017-01-02Merge branch '4-use-after-free-when-receiving-numeric-432-invalid-nick' into ↵Nei
'security' avoid server_disconnect See merge request !4
2017-01-02Merge pull request #586 from LemonBoy/fix-580ailin-nemui
Process the nick changes in queries before the PRIVMSG is handled.
2016-12-19bail out if nick is NULL in irc_query_findailin-nemui
Closes #1
2016-12-19avoid server_disconnectailin-nemui
Closes #4
2016-12-15Process the nick changes in queries before the PRIVMSG is handled.LemonBoy
Otherwise we end up with the message in the status window since the frontend knows jack shit about the casemapping option when it tries to find the associated window for the query.
2016-12-12Add an option to stop the connection when SASL fails.LemonBoy
2016-11-23add a static buffer for dcc received dataailin-nemui
increased buffersize might make irssi freeze less / #159
2016-10-22Rename SSL to TLS.Alexander Færøy
This patch changes the internal name of SSL to TLS. We also add -tls_* options to /CONNECT and /SERVER, but make sure that the -ssl_* versions of the commands continue to work like before.
2016-09-30Make the cap_complete field unsigned.LemonBoy
Fixes a problem where the field would end up as a negative number when exposed to the perl scripts. And move it near the other bit-packed fields so we take advantage of the packing.
2016-09-26Merge pull request #506 from kruton/sasl-400-byte-chunkailin-nemui
SASL: handle fragmentation
2016-08-29SASL: handle fragmentationKenny Root
The IRCv3 SASL extension says that AUTHENTICATION payloads of exactly 400 bytes in length indicate that the message is fragmented and will continue in a subsequent message. Handle the reassembly and splitting of these messages so that we are compliant with the specification.
2016-08-24Set the default STATUSMSG to @ instead of @+ if it's missingdequis
This fixes two issues: - IRCNet doesn't have STATUSMSG, but it supports +channels, and including + in the default value meant processing those incorrectly - The "bahamut hack", for old servers that support but don't advertise STATUSMSG, didn't work since ischannel_func doesn't use the default. The choice of @ intentionally leaves out support for other STATUSMSG (for example, AzzurraNet's bahamut 1.4 fork seemed to support + and % in any order, contradicting the comment in the code). I think this is a decent tradeoff, given how those servers are uncommon and relying on +# or %# is even less common than @#. Fixes #531
2016-06-14Merge pull request #422 from LemonBoy/misc-cleanupailin-nemui
Clean up misc.c
2016-06-13Use ; as separator instead of ,LemonBoy
2016-06-12Make rejoin_channels_mode of type CHOICELemonBoy
2016-06-05Clean up some GTimeVal jugglingLemonBoy
2016-06-05Replace strarray_length with g_strv_lengthLemonBoy
2016-06-05Replace strocpy with g_strlcpyLemonBoy
The only difference was that the former returned 1 if the buffer was overflown, but the return value was never checked.
2016-06-01Correct the name of the emitted signal.LemonBoy
There's a typo in 'sasl_fail', the signal that's emitted should be 'server sasl failure' and not 'server sasl fail'.
2016-05-03Fix some ANSI C issues.pisculichi
2016-04-05Merge pull request #453 from LemonBoy/dcc-quoteailin-nemui
Support quoted filenames in some /DCC commands
2016-03-29Revert "Removed the obsolete SQUERY and SERVLIST commands"ailin-nemui
This reverts commit 4beebe3238dda96efd4c3a0a6f6002ad5afc96e7.
2016-03-22Support quoted filenames in some /DCC commandsLemonBoy