weechat

mirror of https://github.com/weechat/weechat.git synced 2026-06-24 20:06:38 +02:00

Files

T

Sébastien Helleu 5dbb96b66a relay: limit size of decompressed websocket frame to prevent memory exhaustion (GHSA-v2v4-45wm-5cr3)

An authenticated relay client using the permessage-deflate websocket
extension could send a small compressed frame that decompresses to an
unbounded amount of data, exhausting all memory and crashing WeeChat.

The output buffer in relay_websocket_inflate is now capped to
WEBSOCKET_INFLATE_MAX_SIZE: frames decompressing beyond this limit are
rejected and the connection is closed.

2026-05-31 09:16:06 +02:00

core

core: check error ERANGE after call to strtoul in function util_version_number

2026-04-05 15:33:33 +02:00

gui

core, plugins: fix typos in comments on functions, use imperative

2026-03-23 20:45:36 +01:00

plugins

relay: limit size of decompressed websocket frame to prevent memory exhaustion (GHSA-v2v4-45wm-5cr3)

2026-05-31 09:16:06 +02:00

scripts

core: update copyright dates