Commit Graph

1983 Commits

Author SHA1 Message Date
Jilles Tjoelker 0ae1f793d9 libratbox: Fix undefined behaviour advancing pointer beyond end of array.
The C standard does not allow constructing pointers beyond one past the end
of an array. Therefore, if size is an unsigned type (size_t), then
buf + size is never less than buf.

Clang on 32-bit took advantage of the undefined behaviour, causing
segfaults.

(cherry picked from commit fab79c5d25423884fc4f5e0a56d97cb59b618196)
2014-08-01 18:23:59 -07:00
Rylee Fowler e0489d0eec atheme module: remove trailing whitespace 2014-08-01 18:23:59 -07:00
AppleDash 4d07bf5c59 ./Config: Remove unneeded code and handle ^D 2014-08-01 18:23:58 -07:00
AppleDash 47130005ae ./Config: Somewhat rewrote script, improved nicklen prompting and interrupt handling. 2014-08-01 18:23:58 -07:00
Rylee Fowler 26005c6f48 fix spelling typo (s/propegate/propagate/g) 2014-08-01 18:23:58 -07:00
Sam Dodrill 6a55b37bd9 example conf: add tor blacklist 2014-08-01 18:23:58 -07:00
Apple Dash e05337fa2e include/cache.h: Add support for bigmatix. 2014-08-01 18:23:58 -07:00
Sam Dodrill fb096745d8 Fix autotools build system 2014-06-09 16:10:15 -07:00
Sam Dodrill 990a42b71b Staging for Elemental-IRCd 6.6 release 2014-06-01 16:09:24 -07:00
Sam Dodrill 19d656a29b Fix buffer overflow in introduce_client and burst_TS6
If the client being introduced has more than 10 user modes send_umode()
will overflow ubuf

tracks Adam-/charybdis@9744d53ec9
2014-06-01 15:59:00 -07:00
Sam Dodrill d726cc83a2 Add UMODE +I to hide channels in WHOIS line
Does not hide channels from IRC operators.
2014-06-01 15:52:10 -07:00
Sam Dodrill 8036a22c25 Show remote server IP addresses 2014-06-01 15:20:37 -07:00
Sam Dodrill 050ea2b809 Add channel mode +u to hide banlists
Banlists are silently hidden from all non-halfops or up. Bans still may
be seen as normally. This mode is entirely opt-in.
2014-05-28 19:36:14 -07:00
Sam Dodrill 9a90d0d80e src/s_user: Prevent desync of clients on CHGHOST 2014-04-29 13:18:39 -07:00
Sam Dodrill 2a8868cfe3 tools/genssl: Make certificates last for 3560 days 2014-04-22 12:22:33 -07:00
Andrew Cook b781b52396 stringops: Don't strip unicode in strip_unprintable 2014-04-22 12:15:25 -07:00
Sam Dodrill 02b334ff8f Fix extended-join for remote and fakequit users 2014-04-22 11:38:17 -07:00
Sam Dodrill ae6e4d3352 Config: Remove clear call 2014-04-22 10:16:24 -07:00
Sam Dodrill 6ccb7036db Config script: Disallow turning off SSL
There is no good reason SSL should ever be disabled.
2014-04-16 11:12:29 -07:00
Sam Dodrill f31302d01d Merge branch 'configure-script' 2014-04-15 10:42:17 -07:00
Sam Dodrill 685eed838a README: Update README 2014-04-15 10:40:12 -07:00
Sam Dodrill d23dc975b3 TODO: Update for 6.5.2 2014-04-15 10:28:54 -07:00
Sam Dodrill 4d941d3f49 modules/m_post: Remove snotes
Change made to track upstream
2014-04-12 07:28:41 -07:00
Sam Dodrill 53c7dba717 example confs: Remove AHBL blacklists, which are no longer available. 2014-04-11 11:16:59 -07:00
Sam Dodrill 0953068ef0 m_part: Add quotes around part reason
This is a practice already used by some networks including freenode. It
makes it possible to distinguish user part messages and forced parts
such as /remove.

ref: atheme/charybdis@a0b4a9216d
2014-04-11 11:13:00 -07:00
Sam Dodrill f5945c6972 modules/core/m_message: Flood notices now global
To ease centralized management.
2014-04-10 20:29:11 -07:00
Sam Dodrill a5e296e4eb modules/m_sasl: sasl: fix regression introduced by sasl <-> auth_user integration.
This fixes the null-dereference reported on full-disclosure [1].  A
corrected analysis of the issue
follows below:

When SASL authentication completes, and auth_user is requested,
client_p->user may be NULL. Thusly accessing fields of client_p->user
may cause a null dereference. In these cases, aborting SASL auth
early is a correct interpretation of the IRCv3.1 specification.  The
code must handle this situation, which this commit corrects.

[1]: http://seclists.org/fulldisclosure/2014/Mar/320
2014-03-23 13:57:49 -07:00
Sam Dodrill 1bd7b59879 clicaps: Disable away-notify for now 2014-03-20 07:42:29 -07:00
Sam Dodrill 3a8780867a modules/m_sasl: Emergency patch for m_sasl. Details on full-disclosure 2014-03-17 11:02:55 -07:00
Sam Dodrill be813f8605 src/channel: fix possible null reference in joining 2014-03-09 15:42:07 -07:00
Sam Dodrill c649e42ae9 extensions/m_roleplay: Transmit source name with message 2014-02-18 09:50:59 -08:00
Sam Dodrill a7a510a504 src/supported: add OWNER to 005 output 2014-02-18 08:50:25 -08:00
Sam Dodrill 174c8b49b1 Merge branch 'services-modules' 2014-02-14 19:32:13 -08:00
Sam Dodrill 0ebe9a5930 Merge branch 'purge-cruft' 2014-02-14 19:32:02 -08:00
Sam Dodrill eceffbca02 src/messages.tab: Make ERR_NOOPERHOST more generic 2014-02-14 19:28:40 -08:00
Sam Dodrill 06bfe138d2 modules/m_oper: Prevent password guessing
Change the message for an invalid OPER password to "No appropriate
operator blocks were found for your host".
2014-02-14 19:28:40 -08:00
Sam Dodrill 20b066f6f4 Add TODO for elemental-ircd 6.6 2014-02-02 08:54:48 -08:00
Sam Dodrill 8f1d057a36 Remove old files from the root and finish rebrand 2014-01-30 19:49:46 -08:00
Sam Dodrill 74289701af src/s_user: Add metadata for cloaked hostnames for use with services 2014-01-30 22:37:46 -05:00
Sam Dodrill 1a536989b2 extra: Add modules for services packages 2014-01-30 19:23:52 -08:00
Sam Dodrill 55147df5de src/s_user: Make UID assignment happen once we know it's a valid user 2014-01-29 21:14:09 -08:00
Sam Dodrill 40249913ca Config: Add prototype auto-configuration script 2014-01-26 10:27:59 -08:00
Sam Dodrill 177241882c Merge branch 'ircv3-metadata'
Allow support for the ircv3 metadata verbs while maintaining backwards
compatibility with the old ShadowIRCD verbs
2014-01-17 08:19:39 -08:00
Sam Dodrill ba15f6d690 Merge branch 'fix-non-qs-ts6' 2014-01-17 05:09:40 -08:00
Sam Dodrill d4ea7f897e Merge branch 'grammatical-errors' 2014-01-17 05:09:33 -08:00
Sam Dodrill a3da200088 Merge branch 'owners-immune' 2014-01-17 05:09:16 -08:00
Sam Dodrill 6faf3c2a45 src/client: Remove TS5 logic in the link protocol 2014-01-17 05:07:41 -08:00
Sam Dodrill 3bf316e2dc help: Fix some required oper privileges.
references atheme@charybdis/1de147abc5b145ea3b7c09128ee8d8fb19726ef4
2014-01-11 17:53:50 -08:00
Sam Dodrill 2e1fbf8292 extensions/chm_sslonly: Fix grammatical error
References atheme@charybdis/46b55df60bfbb1d9fa640a819ba270d708e3d2b0
2014-01-11 17:51:36 -08:00
Sam Dodrill c03f7b30c4 bandb: Don't attempt to write to a NULL helper.
Though without a bandb binary your installation is completely screwed.

References atheme@charybdis/c8729b08fb171d80030155c638a65aff93cb1a45
2014-01-11 17:49:21 -08:00