Sébastien Helleu 3687ce0f0f relay: limit size of received websocket frame and HTTP body to prevent memory exhaustion ...

A relay client could announce a huge websocket frame (or HTTP body via
"Content-Length") and dribble its payload, making WeeChat accumulate it
in a buffer that grew without limit, until all memory was exhausted. The
websocket frame path is reachable before authentication with the
"weechat" and "irc" protocols.

The announced websocket frame length and HTTP "Content-Length" are now
bounded by WEBSOCKET_FRAME_MAX_LENGTH and RELAY_HTTP_BODY_MAX_LENGTH: an
oversized websocket frame closes the connection, and an oversized body is
rejected.

2026-06-01 21:56:34 +02:00

..

alias

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

irc

irc: limit size of data received from the server to prevent memory exhaustion

2026-06-01 21:53:03 +02:00

logger

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

relay

relay: limit size of received websocket frame and HTTP body to prevent memory exhaustion

2026-06-01 21:56:34 +02:00

trigger

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

typing

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

xfer

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

test-plugin-api-info.cpp

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

test-plugin-config.cpp

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

test-plugins.cpp

core: update copyright dates

2026-03-08 10:37:15 +01:00