summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2018-01-03disable variable arguments codeailin-nemui
2018-01-03Merge branch 'uaf-modify' into 'master'Nei
Prevent a UAF error during the execution of some commands See merge request irssi/irssi!24
2017-12-11Merge pull request #766 from horgh/horgh/mode-parsingailin-nemui
Fix MODE parameter parsing
2017-12-02Update NULL comparison style and be C89 compatibleWill Storey
2017-11-30move decls before codeailin-nemui
2017-11-30fix commentsailin-nemui
2017-11-27Revert initializing pointers to NULLWill Storey
To maintain C89 compatibility
2017-11-26Merge pull request #790 from ailin-nemui/mirc-colourailin-nemui
reset colour at comma, like mIRC
2017-11-26Merge pull request #762 from ailin-nemui/global-historyailin-nemui
allow access to global command history when using a specifc history
2017-11-20Update formats.cailin-nemui
remove now useless check for ,
2017-11-15reset colour at comma, like mIRCailin-nemui
Fixes #742 and #740
2017-11-15Merge pull request #786 from ailin-nemui/show-inital-nickailin-nemui
show initial nick and name on first start
2017-11-11Prevent a UAF error during the execution of some commandsLemonBoy
Some arguments were free'd first and then printed, leading to gibberish being output to screen or a crash. Found by Joseph Bisch. Closes: !GL17
2017-11-10use enumailin-nemui
2017-11-03Keep a copy of the strings coming from the configLemonBoy
The "HILIGHT_REC" structure used to keep a pointer to the "servertag" string, owned by the "CONFIG_NODE", causing a double-free.
2017-11-01up abiailin-nemui
2017-11-01show initial nick and name on first startailin-nemui
2017-10-26clean up file path after moveailin-nemui
2017-10-24Strip : from <trailing> parametersWill Storey
This is to fix #601. The function used to extract the mode string assumed that ":" would only occur in a particular spot. This lead to the possibility that ":" could be treated as part of things like nicknames or mode arguments, where it should have been stripped as part of protocol escaping.
2017-10-23Merge pull request #770 from horgh/horgh/rm-unused-functionailin-nemui
Remove a couple unused functions
2017-10-20Merge branch 'fix-16' into 'security'Nei
Prevent a OOB read when parsing IRCNet ! channels See merge request irssi/irssi!22
2017-10-20Merge branch 'fix-gl-15' into 'security'Nei
Don't proceed with cmd_msg if there was an error splitting msg See merge request irssi/irssi!21
2017-10-20Merge branch 'fix-dcc' into 'security'Nei
fix dcc See merge request irssi/irssi!20
2017-10-20Make split functions return an array with NULL instead of NULLJoseph Bisch
This avoids undefined behavior in functions that call these split functions and expect an array back instead of just a NULL pointer.
2017-10-20Merge branch 'fix-gl-13' into 'security'Nei
Fix use after free when channel is destroyed inbetween being synced See merge request irssi/irssi!19
2017-10-20Revert "Don't proceed with cmd_msg if there was an error splitting msg"Joseph Bisch
This reverts commit bd83852d646de28f2e0fe01efe7c9236aa4074d4.
2017-10-20Merge branch 'fix-gl-12' into 'security'Nei
fix out of bounds read in compress_colors See merge request irssi/irssi!18
2017-10-20Don't proceed with cmd_msg if there was an error splitting msgJoseph Bisch
There may be cases (such as if target or server->nick is very long) where the split_message function returns NULL, indicating an error. To avoid a potential segfault, we now check to see if splitmsgs is NULL.
2017-10-20fix dcc issueailin-nemui
2017-10-19Prevent a OOB read when parsing IRCNet ! channelsLemonBoy
Make sure the string has enough data. Fixes #16
2017-10-18Merge pull request #771 from paultownsend/issue-120LemonBoy
Add alternate_nick as a network-specific property
2017-10-14Changes based on comments in pull #771.Paul Townsend
2017-10-13Mark net_ip_compare() deprecatedWill Storey
2017-10-13Revert "Delete unused function net_ip_compare()"Will Storey
This reverts commit cb5f3cba1f2b5dbad67bcc107f3fe4a1875cc52d.
2017-10-13Merge pull request #769 from horgh/horgh/error-check-server-connectailin-nemui
Set host to an empty string on error
2017-10-11Silence down a warning that would appear on "/away" in Capability mode.Edward Tomasz Napierala
2017-10-11Sort Capsicum headers.Edward Tomasz Napierala
2017-10-11Improve Capsicum stdio limits to fix terminal state on exit.Edward Tomasz Napierala
2017-10-11Add alternate_nick as a network-specific property.Paul Townsend
2017-10-11Bump default capsicum_port_max to 9999.Edward Tomasz Napierala
This is needed for servers like ssl.efnet.org, which, per default config, listen on 9999.
2017-10-10Always initialize the host stringWill Storey
This also removes a wordy comment
2017-10-09Delete unused function net_connect()Will Storey
2017-10-09Delete commented out CYGWIN defineWill Storey
2017-10-09Delete unused function net_ip_compare()Will Storey
2017-10-09Set host to an empty string on errorWill Storey
While investigating #317, I noticed that it was possible we would access an uninitialized buffer due to failing to check the return value of net_ip2host(). This is done in several places. To make such uses safe, set the host buffer to an empty string on error. It is possible callers could be improved by handling the error in each spot, but this gives us some safety.
2017-10-08Fix segfault in query_remove_allJoseph Bisch
It is possible for rec to be NULL in query_remove_all, resulting in a segfault. So return without doing anything if rec is NULL.
2017-10-08fix uaf in chanquery moduleailin-nemui
the chanquery needs to be removed in any case if a channel rec is destroyed, regardless of any state Fixes GL#13
2017-10-07fix out of bounds read in compress_colorsailin-nemui
Reported by Hanno Böck. Fixes GL#12
2017-10-07Limit capsicum rights to stdio.Edward Tomasz Napierala
This requires FreeBSD fix (https://reviews.freebsd.org/D12622) to work properly.
2017-10-06up abiailin-nemui
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-28 18:34:23 +0000