1
0
mirror of https://github.com/weechat/weechat.git synced 2026-06-27 05:16:38 +02:00
Commit Graph

13842 Commits

Author SHA1 Message Date
Sébastien Helleu 3df0d2d4d3 trigger: use util functions to parse integers 2026-06-20 11:32:44 +02:00
Sébastien Helleu 4d2d93a694 script: use util functions to parse integers 2026-06-20 11:31:33 +02:00
Sébastien Helleu cb0a9a3c42 relay: use util functions to parse integers 2026-06-20 11:27:42 +02:00
Sébastien Helleu 15f0cef09e api: use util functions to parse integers 2026-06-20 11:16:19 +02:00
Sébastien Helleu 49c4c2267a python: use function util_parse_int in API function hook_signal_send 2026-06-20 11:12:54 +02:00
Sébastien Helleu b6f4343d78 javascript: use function util_parse_int in API function hook_signal_send 2026-06-20 11:12:13 +02:00
Sébastien Helleu 0ae7ce165e irc: use util functions to parse integers 2026-06-20 11:09:20 +02:00
Sébastien Helleu 8d69194398 fset: use util functions to parse integers 2026-06-20 10:41:42 +02:00
Sébastien Helleu 054b7ff600 exec: use util functions to parse integers 2026-06-20 10:41:42 +02:00
Sébastien Helleu 0ade9757eb buflist: use util functions to parse integers 2026-06-20 10:41:42 +02:00
Sébastien Helleu 64c0c34735 core: use util functions to parse integers in buffer functions 2026-06-20 10:41:42 +02:00
Sébastien Helleu 6d89ea1324 core: use util functions to parse integers in window functions 2026-06-20 09:51:33 +02:00
Sébastien Helleu bbab9eceb9 core: use util functions to parse integers in nicklist functions 2026-06-20 09:51:33 +02:00
Sébastien Helleu 958c1b84fa core: use util functions to parse integers in function gui_line_hook_update 2026-06-20 09:51:33 +02:00
Sébastien Helleu c545cf75f3 core: use function util_parse_int in function gui_key_grab_init 2026-06-20 09:50:55 +02:00
Sébastien Helleu f34cb85ca3 core: use function util_parse_int in function gui_hotlist_clear_level_string 2026-06-20 09:50:55 +02:00
Sébastien Helleu bed3467efb core: use function util_parse_int in function gui_focus_info_hashtable_gui_focus_info_cb 2026-06-20 09:21:24 +02:00
Sébastien Helleu d5bb81fd2b core: use function util_parse_int in color functions 2026-06-20 09:21:22 +02:00
Sébastien Helleu c03bb825c4 core: use function util_parse_longlong in function gui_chat_hsignal_quote_line_cb 2026-06-20 09:18:36 +02:00
Sébastien Helleu 3200a05c00 relay/api: fix memory leak in resources "handshake", "input" and "completion" 2026-06-17 21:54:15 +02:00
Sébastien Helleu 861f589fc2 core: update ChangeLog (#2326) 2026-06-17 21:31:03 +02:00
aizu-m c40261aed1 xfer: fix out-of-bounds write in xfer_dcc_resume_hash (#2326) 2026-06-17 21:29:45 +02:00
Sébastien Helleu 770e733303 ci: switch from Ubuntu 24.04 to 26.04 2026-06-15 21:55:54 +02:00
Sébastien Helleu 9bd2aaa25d core: mute compiler warning on calls to dup() function 2026-06-15 08:22:03 +02:00
Sébastien Helleu 4e206ee3ae trigger: use "const char *" variables for result of string functions with const parameter 2026-06-15 07:55:20 +02:00
Sébastien Helleu 7ff71d2b0e spell: use "const char *" variables for result of string functions with const parameter 2026-06-15 07:55:10 +02:00
Sébastien Helleu 203fdca3e8 script: use "const char *" variables for result of string functions with const parameter 2026-06-15 07:54:40 +02:00
Sébastien Helleu e3ba25df19 relay: use "const char *" variables for result of string functions with const parameter 2026-06-15 07:54:10 +02:00
Sébastien Helleu 64566629c5 irc: use "const char *" variables for result of string functions with const parameter 2026-06-15 07:52:12 +02:00
Sébastien Helleu 7e3afaf46d core, api: use "const char *" variables for result of string functions with const parameter 2026-06-15 07:52:10 +02:00
Sébastien Helleu cf702d541f api: change type of parameter "pos_option_name" to "const char **" in function config_search_with_string 2026-06-15 07:29:33 +02:00
Sébastien Helleu a8067751eb doc/plugin: fix parameters of mkdir functions
The directory parameter is always `const char *` and not `char *`.
2026-06-15 07:29:28 +02:00
Sébastien Helleu a696a100d8 core: update ChangeLog (#2325) 2026-06-12 13:02:05 +02:00
aizu-m e60786d059 core: fix buffer overflow in function network_pass_socks5proxy (#2325)
bound the configured proxy username and password before they are copied into the fixed stack buffer in network_pass_socks5proxy, otherwise a login longer than the buffer (a long password or token) overruns it while building the SOCKS5 auth request.
2026-06-12 13:00:17 +02:00
Sébastien Helleu d78105ddf5 core: add CVE IDs in ChangeLog 2026-06-09 22:10:17 +02:00
weechatter 2a8c86242b core: update German translations 2026-06-09 10:42:23 +02:00
Sébastien Helleu dd9ef2f4d9 tests: add missing include of string.h 2026-06-08 23:17:19 +02:00
Sébastien Helleu 4c6c55befe core: update translations 2026-06-08 23:15:00 +02:00
Sébastien Helleu de878b2303 relay/api: remove error 400 which is never returned in response to GET /api/scripts 2026-06-08 23:11:27 +02:00
Sébastien Helleu 80a47b6731 relay/api: add missing fields in script object in OpenAPI document 2026-06-08 23:11:06 +02:00
Sébastien Helleu 551c12e049 relay/api: add resource GET /api/scripts 2026-06-08 23:04:40 +02:00
Sébastien Helleu 12016c4c05 script: add info "script_languages" 2026-06-08 18:54:06 +02:00
Sébastien Helleu 3aeaa70e64 ci: bump poexam to version 0.0.11 2026-06-07 21:56:22 +02:00
Sébastien Helleu 66e633e27e core: add version 4.9.2 2026-06-07 11:51:55 +02:00
Sébastien Helleu 436bbeceff tests: increase buffer size for injection of fake IRC message 2026-06-07 08:47:36 +02:00
Sébastien Helleu c307087e2d core: update ChangeLog (#2324) 2026-06-06 11:19:14 +02:00
aizu-m 51a1149852 relay: fix out-of-bounds read in relay_http_print_log_request (#2324) 2026-06-06 11:18:06 +02:00
Sébastien Helleu d74993a42c relay: limit size of partial message received while reading an HTTP request to prevent memory exhaustion
A relay client could send data with no end-of-line (an unterminated method
or header line) and dribble its payload, making WeeChat accumulate it in the
partial message buffer that grew without limit, until all memory was
exhausted. This path is reachable before authentication during websocket
initialization with the "weechat" and "irc" protocols.

The accumulated partial message is now bounded by
RELAY_HTTP_PARTIAL_MESSAGE_MAX_LENGTH: once the limit is reached, the extra
data is ignored.
2026-06-06 09:36:22 +02:00
Sébastien Helleu 51464e400f core: add links to issues in ChangeLog (#2321, #2322) 2026-06-06 07:20:41 +02:00
Sébastien Helleu 1c5e6c3fc2 core: update ChangeLog (#2323) 2026-06-06 07:20:38 +02:00