summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2017-07-29Implement /cap_enter.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29Consistency: use FALSE instead of 0.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-29When rawlog open fails, there's no point in trying to write. Don't.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Add missing diagnostics for rawlog open().Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-28Don't compute log_dir_create_mode in three different places.Edward Tomasz Napierala
Signed-off-by: Edward Tomasz Napierala <trasz@FreeBSD.org>
2017-07-26Merge pull request #719 from LemonBoy/sasl-disable-noneailin-nemui
Setting sasl_mechanism to '' disables the auth
2017-07-25Allow the user to clear the sasl-related fieldsLemonBoy
There was no easy way for the user to disable the SASL authentication or to clear the username/password once the network was created. Closes #718
2017-07-05Merge branch 'fix-11' into 'security'Nei
Correct GHashTable usage See merge request !16
2017-07-05Merge branch 'fix-10' into 'security'Nei
Check return value of localtime See merge request !15
2017-07-04correct GHashTable usageailin-nemui
2017-07-03Merge pull request #653 from ailin-nemui/regexexailin-nemui
Enable UTF8 in GRegex
2017-06-29Check return value of localtimeNei
Fixes #10
2017-06-23Merge pull request #722 from dequis/back-to-the-futureailin-nemui
parse_time_interval: Allow negative time in settings
2017-06-23Merge pull request #709 from osm/masterailin-nemui
Escape nicks during nick completion when expand_escapes is enabled
2017-06-23Merge pull request #703 from vague666/server_modify_portailin-nemui
Allow -port <num> or irc.host.tld <num> in /server add
2017-06-23Merge pull request #721 from dequis/unexpected-exitsailin-nemui
term-terminfo: Avoid switching out of alt screen on unexpected exits
2017-06-22remove constailin-nemui
2017-06-21Escape nicks during nick completion when expand_escapes is enabledOscar Linderholm
Fixes #693
2017-06-19fix weird n-fold unescapingailin-nemui
2017-06-19Merge branch 'master' into regexexailin-nemui
2017-06-17parse_time_interval: Allow negative time in settingsdequis
This splits sign parsing out of parse_time_interval_uint() so that the negative sign is applied outside of the unsigned context where the number parsing is done, and after all the checks that it's lower than (1 << 31) This fixes issues with settings like `server_reconnect_time`, `server_connect_timeout` and `lag_max_before_disconnect`, which accepted -1 as a valid value.
2017-06-17term-terminfo: Avoid switching out of alt screen on unexpected exitsdequis
Perl sucks and kills the whole process when there's a version mismatch in Perl_xs_handshake(). Our atexit handler catches the exit and deinitializes the terminal, removing the error. This commit uses the 'quitting' global variable which is set when irssi is voluntarily quitting, and avoids sending TI_rmcup, which restores the original screen and makes the error invisible.
2017-06-07Merge pull request #715 from dequis/lastlog-glist-performanceailin-nemui
Performance improvements for /lastlog
2017-06-07Merge pull request #714 from dequis/dcc-fname-gcc-warningsailin-nemui
fe-dcc-(get|send): Fix some -Wpointer-compare with newer gcc
2017-06-05Performance improvements for /lastlog -beforedequis
This avoids the use of g_list_find() to find if a match was already added to the list of results, by checking the last two added matches instead. Checking just the last match isn't enough because a NULL match is added as a separator (shown as -- in the UI)
2017-06-05Performance improvements for /lastlog with big result setsdequis
This applies to "/lastlog" with no filters (or with filters that don't filter a lot) and with large amounts of text in the scrollback. Test case: /exec seq 1 500000 /lastlog -file log.txt Thanks to morning for reporting this.
2017-06-05fe-dcc-(get|send): Fix some -Wpointer-compare with newer gccdequis
The warning itself: >warning: comparison between pointer and zero character constant [-Wpointer-compare] Harmless stuff as far as I can tell. The fix adds a null check that probably isn't needed. The old code that compared against '\0' worked a lot like a null check so it makes sense to keep that, while also adding the intended check for empty string. This was visible with "/dcc close send a" showing an empty filename. The equivalent for get didn't show the filename in the format string.
2017-06-05Merge remote-tracking branch 'gitlab/security'Ailin Nemui
2017-06-05get rid of new_textailin-nemui
2017-06-05Update iregex-gregex.cailin-nemui
add 2 comments about new_string
2017-06-05Update iregex-gregex.cailin-nemui
make helper functions static
2017-06-04Make backward compatible with ssl flagsJari Matilainen
2017-06-04abi upailin-nemui
2017-06-04change ternary operator to if/else statements, add default ssl port supportJari Matilainen
2017-06-04Refactor regex and implement UTF8 mode for GRegexailin-nemui
- with non-unicode byte to Private Use Area A mapping - move all ifdefs to iregex.h file only
2017-06-02Merge pull request #706 from dequis/parse-uintailin-nemui
Add parse_uint function to improve integer overflow handling
2017-06-01Use CXX for fe-fuzz linkingJoseph Bisch
2017-05-30Merge branch 'fix-gl9' into 'security'Nei
Fix dcc_request where addr is NULL See merge request !13
2017-05-29Fix dcc_request where addr is NULLJoseph Bisch
2017-05-29Fix oob read of one byte in get_file_params_count{,_resume}Joseph Bisch
We can use continue to handle cases such as: "ab<space><space>c"
2017-05-27do not reset true colour bit on colour resetailin-nemui
fixes #710
2017-05-18Add parse_uint function to improve integer overflow handlingdequis
Originally found by oss-fuzz (issue 525) in get_ansi_color using ubsan. After a lot of analysis I'm 99% sure this isn't security relevant so it's fine to handle this publicly. The fix is mainly adding a function that does it right and use it everywhere. This is harder than it seems because the strtol() family of functions doesn't have the friendliest of interfaces. Aside from get_ansi_color(), there were other pieces of code that used the same (out*10+(*in-'0')) pattern, like the parse_size() and parse_time_interval() functions, which are mostly used for settings. Those are interesting cases, since they multiply the parsed number (resulting in more overflows) and they write to a signed integer parameter (which can accidentally make the uints negative without UB) Thanks to Pascal Cuoq for enlightening me about the undefined behavior of parse_size (and, in particular, the implementation-defined behavior of one of the WIP versions of this commit, where something like signed integer overflow happened, but it was legal). Also for writing tis-interpreter, which is better than ubsan to verify these things.
2017-05-15Make sure port is only set on /server modify if specifiedJari Matilainen
2017-05-14Merge pull request #702 from vague666/server_modify_notlsailin-nemui
Added support for -notls and -notls_verify
2017-05-14Update fe-server.cailin-nemui
2017-05-14Spaces to tabsJari Matilainen
2017-05-12expand macroailin-nemui
2017-05-12improve nicklist performanceailin-nemui
2017-05-11Added code commentsJari Matilainen
2017-05-11Allow -port <num> or irc.host.tld <port num> in /server add and /server modifyJari Matilainen