adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-10-31 01:32:02 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity
6,053 Commits 6 Branches 92 Tags
255bccea976d0ba75e37d9e29be4e555cc9bd6ae
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alexey Sokolov f651a6f34f Merge pull request #2048 from RealKindOne/remove-PutAllUser 
Remove deprecated PutAllUser().

It was deprecated in 1.9.0
 2026-10-02 07:27:17 +01:00
Alexey Sokolov 3f67acfc4b Merge pull request #2047 from RealKindOne/fix-listsockets 
listsockets: Fix 1970s date bug.
 2026-10-02 01:43:31 +01:00
Alexey Sokolov 1158f3bf58 Merge pull request #2046 from znc/dependabot/github_actions/github/codeql-action-4.38.2 
build(deps): bump github/codeql-action from 4.37.3 to 4.38.2
 2026-10-01 19:47:29 +01:00
Alexey Sokolov 4a19b6ffb1 Merge pull request #2042 from RealKindOne/bugfixes 
Stop znc from prepending '#' in join command if missing and fix corecaps wiki link.
 2026-09-22 01:12:03 +01:00
Alexey Sokolov 9c9ad77afa update freebsd readme badge url 2026-09-13 13:46:48 +01:00
Alexey Sokolov 76cdad9e6a Merge branch '1.10.x' 2026-09-13 10:54:57 +01:00
Alexey Sokolov 2fb9746406 Return version number to 1.10.x 2026-09-13 09:10:25 +01:00
Alexey Sokolov 6bd91573ce Increase the version number to 1.10.3 2026-09-13 09:05:34 +01:00
Alexey Sokolov 4b88c64c6e Fix crash while unloading modules 
The bug allowed unprivileged users to trigger use-after-free while
unloading modules

Note that the fix requires a slight API change for OnEmbeddedWebRequest:
now the callers (webadmin is the only known caller of it) call it via
DoEmbeddedWebRequest() instead. The modules which implement this hook
need no changes.

CVE-2026-82373

Found by Claude from Anthropic, reported by Ada Logics.
 2026-09-12 19:08:21 +01:00
Alexey Sokolov b7cc2151ff Merge branch '1.10.x' 2026-09-06 09:49:10 +01:00
Alexey Sokolov d9b392afd9 Update jQuery to 3.5.1 
Fix #2040
CVE-2020-11022, CVE-2020-11023
 2026-09-06 09:45:58 +01:00
Alexey Sokolov fe8d43f828 Merge pull request #2037 from RealKindOne/fixtest 
Fix MotdBufferDoesNotAccumulate376 test.
 2026-08-21 20:32:25 +01:00
Alexey Sokolov 163ce94fee Merge pull request #2036 from RealKindOne/gitignore 
gitignore: Add more files
 2026-08-20 08:20:24 +01:00
Alexey Sokolov 836379a567 Merge pull request #2031 from RealKindOne/fix-motd-buffer 
Fix MOTD buffering to prevent duplicate 376 messages after rate limiting
 2026-08-17 08:29:54 +01:00
Alexey Sokolov 06536531eb Merge pull request #2033 from znc/dependabot/github_actions/github/codeql-action-4.37.3 
Bump github/codeql-action from 4 to 4.37.3
 2026-08-01 14:00:54 +01:00
Alexey Sokolov 038af89b90 CI: reenable asan, simplify config with anchors 2026-07-28 08:48:56 +01:00
Alexey Sokolov 3e95cf44a6 Restore test 
I somehow oversimplified it, breaking it
 2026-07-23 02:35:29 +01:00
Alexey Sokolov 133f0ad585 typo 2026-07-23 02:10:28 +01:00
Alexey Sokolov 7d4879ab26 Cleanup previous PR, add integration test for multiple joins 2026-07-22 09:24:52 +01:00
Alexey Sokolov 583c52866c Merge pull request #2030 from RealKindOne/fix-client-cycle 
Fix join/part not working when a client sends '/cycle' or '/hop'.
 2026-07-22 08:47:46 +01:00
Alexey Sokolov fe0f9be77a Merge pull request #2028 from znc/dependabot/github_actions/actions/checkout-7 
Bump actions/checkout from 6 to 7
 2026-07-19 20:37:53 +01:00
Alexey Sokolov 31e47f1193 Merge pull request #2027 from znc/dependabot/github_actions/codecov/codecov-action-7 
Bump codecov/codecov-action from 6 to 7
 2026-07-19 20:37:35 +01:00
Alexey Sokolov 6d470db241 Revert "Fix JOIN command not joining detached channels on other clients." 
This reverts commit ba32b092e9.

It broke /hop (/part+/join) due to race with server
 2026-07-19 20:35:31 +01:00
Alexey Sokolov 46cca361ab Merge pull request #2029 from RealKindOne/attachbugfix 
Fix JOIN command not joining detached channels on other clients.
 2026-07-02 19:39:05 +01:00
Alexey Sokolov c5014a1d20 Merge pull request #2025 from DarthGandalf/ssl111 
Remove support for OpenSSL<1.1.1

Accidentally readd support for LibreSSL which was accidentally removed in previous commit
 2026-06-30 23:41:58 +01:00
Alexey Sokolov 5bd5ecc5b8 Remove old ssl compatibility code 2026-06-29 19:19:40 +01:00
Alexey Sokolov f416b5ba60 update required openssl version after #2024 2026-06-29 19:07:43 +01:00
Alexey Sokolov e7919287fe Merge pull request #2021 from dxbjavid/copy-preserve-mode 
fileutils: open Copy() destination at the source's mode
 2026-06-09 23:24:33 +01:00
Alexey Sokolov 16062c87b1 Merge pull request #2020 from rootvector2/identfile-bound-spoof-read 
identfile: read original spoof with ReadFile
 2026-06-09 22:47:40 +01:00
Alexey Sokolov 042d827e4a Merge pull request #2023 from DarthGandalf/nossl 
Add CI job for ZNC without SSL support
 2026-06-08 23:03:02 +01:00
Alexey Sokolov 53ffcc909b add include 2026-06-08 22:43:13 +01:00
Alexey Sokolov 2a9359d1fb Merge branch 'nossl' of github.com:DarthGandalf/znc into nossl 2026-06-08 22:07:34 +01:00
Alexey Sokolov ad12a6011d Skip tests which require SSL 2026-06-08 22:07:11 +01:00
Alexey Sokolov 197a235764 test: Don't wait for SSL question if built without SSL 
And don't hardcode 6667 in preparation for #2022
 2026-06-08 21:54:34 +01:00
Alexey Sokolov 15c94bef77 Add CI job for ZNC without SSL support 2026-06-08 21:42:02 +01:00
Alexey Sokolov 56ed5c3f94 docker: update alpine 2026-05-07 20:15:53 +01:00
Alexey Sokolov f018a75cde Merge branch '1.10.x' 2026-05-07 20:07:54 +01:00
Alexey Sokolov eba009c49e Return version number to 1.10.x 2026-05-07 20:07:43 +01:00
Alexey Sokolov 59af2206c6 Increase the version number to 1.10.2 2026-05-07 20:00:42 +01:00
Alexey Sokolov a80cf49f5e Merge pull request #2018 from MarkLee131/fix/http-hardening-headers 
HTTPSock: emit standard hardening response headers
 2026-05-05 00:26:58 +01:00
Alexey Sokolov 663699b617 Merge pull request #2015 from MarkLee131/fix/cstring-empty-input-guards 
ZNCString: guard Replace/Split against empty-width arguments
 2026-05-04 22:05:49 +01:00
Alexey Sokolov 3584162177 CI: remove firefox 
It tries to be upgraded from snap, and fails
 2026-05-02 00:29:31 +01:00
Alexey Sokolov f35e565637 Merge pull request #2013 from MarkLee131/fix/base64-decode-ub 
ZNCString: avoid left shift of negative value in Base64Decode
 2026-05-01 22:23:24 +01:00
Alexey Sokolov 6186f611b9 Merge pull request #2017 from MarkLee131/fix/checkpass-constant-time 
User: use constant-time compare for MD5/SHA256/plain password paths
 2026-04-30 08:23:07 +01:00
Alexey Sokolov 866303eef0 Merge pull request #2014 from MarkLee131/fix/parseservertime-clamp-range 
Utils: reject out-of-range years in ParseServerTime
 2026-04-27 01:43:24 +01:00
Alexey Sokolov 7456cbaf02 Merge pull request #2016 from MarkLee131/fix/addheader-crlf-guard 
HTTPSock: reject CR/LF in AddHeader name/value
 2026-04-27 01:38:00 +01:00
Alexey Sokolov 8f5425f99c Merge pull request #1999 from znc/dependabot/github_actions/codecov/codecov-action-6 
Bump codecov/codecov-action from 5 to 6
 2026-04-25 11:46:08 +01:00
Alexey Sokolov 2a1844ee4e Merge pull request #2000 from znc/dependabot/github_actions/docker/login-action-4 
Bump docker/login-action from 3 to 4
 2026-04-25 11:45:34 +01:00
Alexey Sokolov 939d2b6c30 Merge pull request #1998 from znc/dependabot/github_actions/docker/metadata-action-6 
Bump docker/metadata-action from 5 to 6
 2026-04-25 11:45:05 +01:00
Alexey Sokolov 7540979707 Merge pull request #1997 from znc/dependabot/github_actions/docker/build-push-action-7 
Bump docker/build-push-action from 6 to 7
 2026-04-25 11:44:40 +01:00
Alexey Sokolov 0f1c646e5e Merge pull request #1991 from znc/dependabot/github_actions/actions/upload-artifact-7 
Bump actions/upload-artifact from 6 to 7
 2026-04-25 11:44:23 +01:00
Alexey Sokolov 94aa541793 ZNC 1.10.2-rc1 2026-04-23 21:19:26 +01:00
Alexey Sokolov 8566db72dd Merge pull request #1995 from jabberwock/fix/getparamscolon-bounds-check 
Message: add bounds check in GetParamsColon when uIdx >= params.size()
 2026-03-17 18:05:39 +00:00
Alexey Sokolov 55d34645de Merge pull request #1992 from TehPeGaSuS/patch-2 
Fix formatting in ZNC connection message
 2026-03-10 18:45:27 +00:00
Alexey Sokolov 84be3d0f0b Merge pull request #1990 from danny8376/webadmin-pass-w-space 
Fix webadmin serverlist parsing for password containing space
 2026-02-27 00:00:45 +00:00
Alexey Sokolov ad7bd6d7ee Don't try to join channel which ZNC is already on. 
When Goguma connects to ZNC, it joins the joined channels again and
again, triggering flood protection.

Note: even with this fix, the Goguma+ZNC experience is still pretty bad
and requires doing something about repeating chat history
 2026-01-26 22:15:23 +00:00
Alexey Sokolov a187ae180e Merge pull request #1987 from znc/dependabot/github_actions/actions/upload-artifact-6 
Bump actions/upload-artifact from 5 to 6
 2026-01-01 17:01:41 +00:00
Alexey Sokolov e9a1f0d975 Merge pull request #1989 from Un1matr1x/issues/1988 
Welcome to 2026
 2026-01-01 14:55:26 +00:00
Alexey Sokolov 418628a0d9 Merge pull request #1985 from znc/dependabot/github_actions/actions/checkout-6 
Bump actions/checkout from 5 to 6
 2025-12-12 01:09:26 +00:00
Alexey Sokolov 81a76a05b0 Merge pull request #1982 from bastelratte/syntax_de 
Update autoreply.de_DE.po
 2025-11-06 00:57:00 +00:00
Alexey Sokolov 2df0206d06 Merge pull request #1980 from znc/dependabot/github_actions/actions/upload-artifact-5 
Bump actions/upload-artifact from 4 to 5
 2025-11-01 12:38:56 +00:00
Alexey Sokolov cf889c1727 Merge pull request #1981 from znc/dependabot/github_actions/github/codeql-action-4 
Bump github/codeql-action from 3 to 4
 2025-11-01 12:38:19 +00:00
Alexey Sokolov 88bb3c4f77 Merge pull request #1976 from dannycolin/default-theme-dark-mode 
Add a dark mode to the default webskin
 2025-10-06 21:06:59 +01:00
Alexey Sokolov e0e8814045 Merge pull request #1974 from znc/dependabot/github_actions/actions/checkout-5 
Bump actions/checkout from 4 to 5
 2025-09-01 21:47:38 +01:00
Alexey Sokolov 1c417fda7e Merge pull request #1970 from tmzullinger/1.10.x 
modperl: avoid newAV_alloc_x which requires perl >= 5.35.1
 2025-08-01 08:14:57 +01:00
Alexey Sokolov 8890a7bb0d Merge branch '1.10.x' 2025-07-24 22:16:59 +01:00
Alexey Sokolov 2daae4358a Fix build when part of Boost was found 
Fix #1969
Ref #1934
 2025-07-24 22:15:16 +01:00
Alexey Sokolov bc75563dee Switch version back to git 1.10.x 2025-07-24 22:14:09 +01:00
Alexey Sokolov f891382570 ZNC 1.10.1 2025-07-24 22:14:09 +01:00
Alexey Sokolov d9d4277580 Merge pull request #1965 from RealKindOne/stripcontrols 
stripcontrols: Use new On...Message events.
 2025-07-15 08:02:30 +01:00
Alexey Sokolov 89781fc0a1 Merge pull request #1963 from RealKindOne/samplemodule 
sample: Use newer On...Message events.
 2025-07-07 22:02:13 +01:00
Alexey Sokolov 9597bee9a7 Merge pull request #1961 from RealKindOne/fix-chghost/away-notify 
Make account-notify, away-notify and chghost only send to client if the nick is in one of channels attached to a client

Fix #1826
 2025-07-07 08:33:31 +01:00
Alexey Sokolov 0cbd9e541f Merge branch '1.10.x' 2025-07-01 22:25:08 +01:00
Alexey Sokolov eff4196c47 Switch version back to git 1.10.x 2025-07-01 22:19:18 +01:00
Alexey Sokolov 29694fd26f ZNC 1.10.1 2025-07-01 22:16:21 +01:00
Alexey Sokolov 7b3e9c65b7 ZNC 1.10.1-rc1 2025-06-24 19:22:01 +01:00
Alexey Sokolov d48e215761 Merge branch '1.10.x' 2025-06-24 18:16:41 +01:00
Alexey Sokolov af975b2016 Merge pull request #1962 from DarthGandalf/bugs110 
Fix several bugs
 2025-06-24 18:11:24 +01:00
Alexey Sokolov c46bd41037 Unix listener: chmod and change group 
Fix #1955
 2025-06-24 09:04:29 +01:00
Alexey Sokolov 3b4e5d6951 Merge pull request #1959 from RealKindOne/patch-1 
raw: show ZNC->IRC traffic
 2025-06-24 00:26:47 +01:00
Alexey Sokolov 4b12c0dc3c Fix nullptr dereference 
If client sends TAGMSG while server is not connected
 2025-06-23 22:52:34 +01:00
Alexey Sokolov 7b7f691213 Don't store "this" in static variable 
Fix #1960

This could also cause use-after-free if the first connected socket disconnects
 2025-06-23 22:41:08 +01:00
Alexey Sokolov 795d843ee4 Merge pull request #1957 from RealKindOne/logmodule 
log: Use new On...Message for events.
 2025-06-19 22:45:58 +01:00
Alexey Sokolov eff347ff85 Merge branch '1.10.x' 2025-06-15 08:08:44 +01:00
Alexey Sokolov 954070bacf Merge pull request #1956 from RealKindOne/disablecapfix 
Make ZNC save the DisableClientCap/DisableServerCap settings.
 2025-06-15 08:06:01 +01:00
Alexey Sokolov 7e5a26739b Merge branch '1.10.x' 2025-06-09 22:29:32 +01:00
Alexey Sokolov 543e12cb6a Docker for git version: update alpine to 3.22 2025-06-09 22:29:04 +01:00
Alexey Sokolov 7dc24e79fd Update crowdin config for 1.10.x branch 2025-06-09 22:03:55 +01:00
Alexey Sokolov cb0a5e4018 Update version to 1.11 in master branch 2025-06-09 22:03:14 +01:00
Alexey Sokolov 5e3fecbcf1 Update future version to 1.10.1 in the 1.10.x branch 2025-06-09 22:01:20 +01:00
Alexey Sokolov 075cd3897f Increase the version number to 1.10.0 2025-06-09 21:41:36 +01:00
Alexey Sokolov b32d3dbbc9 Fix test on cygwin 
Depending on timing between client and server, the initial JOIN can come in either order - in one case forwarding directly from client, in another joining the channels after client disconnected.
 2025-06-09 20:20:50 +01:00
Alexey Sokolov d1f26593b3 ZNC 1.10.0-rc1 2025-05-28 21:15:08 +01:00
Alexey Sokolov e10c874abe ZNC 1.10.0-beta1 2025-05-18 20:30:17 +01:00
Alexey Sokolov 23efef6a5c update csocket 
fix #1951
 2025-05-17 21:27:57 +01:00
Alexey Sokolov 9a61e6058e Drop old travis config 
It hasn't been used for ages
 2025-05-17 10:14:14 +01:00
Alexey Sokolov 7108a862fa ZNC 1.10.0-alpha2 2025-05-11 21:28:21 +01:00
Alexey Sokolov 694f50c9c0 Make CTCP flood timer use monotonic time 
Probably should use std::chrono types instead of int, but that'll be a later change
 2025-05-11 21:24:08 +01:00
Alexey Sokolov 4f65f86ccd Warn user if flood protection is delaying the messages for too long 
This should help with cases like #1943
 2025-05-11 21:06:21 +01:00
Alexey Sokolov cfd8d3f88d Make PING skip the flood queue just like PONG does 
It's unlikely server has nothing to send at all for all the other messages ZNC is sending and that there's nothing happening server-side too. But PING at least is guaranteed to give the response, so ZNC shouldn't disconnect too eagerly
 2025-05-11 19:36:53 +01:00