Sébastien Helleu 5dbb96b66a relay: limit size of decompressed websocket frame to prevent memory exhaustion (GHSA-v2v4-45wm-5cr3) ...

An authenticated relay client using the permessage-deflate websocket
extension could send a small compressed frame that decompresses to an
unbounded amount of data, exhausting all memory and crashing WeeChat.

The output buffer in relay_websocket_inflate is now capped to
WEBSOCKET_INFLATE_MAX_SIZE: frames decompressing beyond this limit are
rejected and the connection is closed.

2026-05-31 09:16:06 +02:00

..

fuzz

core: update copyright dates

2026-03-08 10:37:15 +01:00

unit

relay: limit size of decompressed websocket frame to prevent memory exhaustion (GHSA-v2v4-45wm-5cr3)

2026-05-31 09:16:06 +02:00

CMakeLists.txt

core: update copyright dates

2026-03-08 10:37:15 +01:00