adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-10-31 01:32:02 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity
6,074 Commits 6 Branches 92 Tags
ab7db564fce349c577d7036dae9f04b2415b7f73
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alexey Sokolov ab7db564fc Merge pull request #2063 from kitkatt7/web-delete-needs-post 
web: only delete channels, notes, keys and certs on POST
 2026-10-28 08:47:15 +00:00
Alexey Sokolov 9962274521 Merge pull request #2058 from kitkatt7/bouncedcc-refuse-loopback-peer 
bouncedcc: refuse DCC requests from IRC aimed at loopback or link-local
 2026-10-24 10:09:16 +01:00
Alexey Sokolov 7694e4a726 Merge pull request #2061 from kitkatt7/allowed-hosts-auth-modules 
enforce allowed hosts when an auth module accepts the login
 2026-10-24 10:07:42 +01:00
Alexey Sokolov bfba882ccc Merge pull request #2057 from kitkatt7/imapauth-quote-login 
imapauth: quote LOGIN arguments and refuse passwords with line breaks
 2026-10-21 00:41:05 +01:00
Alexey Sokolov 3d96465fc0 Merge pull request #2054 from kitkatt7/zncstring-randomstring-csprng 
zncstring: generate RandomString with a CSPRNG instead of rand()
 2026-10-19 18:55:42 +01:00
Alexey Sokolov 881de2f4d5 Merge pull request #2053 from kitkatt7/formattime-usec-pad-underflow 
utils: fix size_t underflow in FormatTime %f padding
 2026-10-18 00:53:43 +01:00
Alexey Sokolov 971506c13f Merge pull request #2052 from kitkatt7/unsigned-char-ctype 
cast to unsigned char for ctype calls on signed-char input
 2026-10-18 00:49:33 +01:00
Alexey Sokolov 1a648ec276 Merge pull request #2050 from RealKindOne/ice-theme 
Fix broken unix socket table in webadmin with 'ice' theme.
 2026-10-18 00:25:55 +01:00
Alexey Sokolov f651a6f34f Merge pull request #2048 from RealKindOne/remove-PutAllUser 
Remove deprecated PutAllUser().

It was deprecated in 1.9.0
 2026-10-02 07:27:17 +01:00
Alexey Sokolov 3f67acfc4b Merge pull request #2047 from RealKindOne/fix-listsockets 
listsockets: Fix 1970s date bug.
 2026-10-02 01:43:31 +01:00
Alexey Sokolov 1158f3bf58 Merge pull request #2046 from znc/dependabot/github_actions/github/codeql-action-4.38.2 
build(deps): bump github/codeql-action from 4.37.3 to 4.38.2
 2026-10-01 19:47:29 +01:00
Alexey Sokolov 4a19b6ffb1 Merge pull request #2042 from RealKindOne/bugfixes 
Stop znc from prepending '#' in join command if missing and fix corecaps wiki link.
 2026-09-22 01:12:03 +01:00
Alexey Sokolov 9c9ad77afa update freebsd readme badge url 2026-09-13 13:46:48 +01:00
Alexey Sokolov 76cdad9e6a Merge branch '1.10.x' 2026-09-13 10:54:57 +01:00
Alexey Sokolov 2fb9746406 Return version number to 1.10.x 2026-09-13 09:10:25 +01:00
Alexey Sokolov 6bd91573ce Increase the version number to 1.10.3 2026-09-13 09:05:34 +01:00
Alexey Sokolov 4b88c64c6e Fix crash while unloading modules 
The bug allowed unprivileged users to trigger use-after-free while
unloading modules

Note that the fix requires a slight API change for OnEmbeddedWebRequest:
now the callers (webadmin is the only known caller of it) call it via
DoEmbeddedWebRequest() instead. The modules which implement this hook
need no changes.

CVE-2026-82373

Found by Claude from Anthropic, reported by Ada Logics.
 2026-09-12 19:08:21 +01:00
Alexey Sokolov b7cc2151ff Merge branch '1.10.x' 2026-09-06 09:49:10 +01:00
Alexey Sokolov d9b392afd9 Update jQuery to 3.5.1 
Fix #2040
CVE-2020-11022, CVE-2020-11023
 2026-09-06 09:45:58 +01:00
Alexey Sokolov fe8d43f828 Merge pull request #2037 from RealKindOne/fixtest 
Fix MotdBufferDoesNotAccumulate376 test.
 2026-08-21 20:32:25 +01:00
Alexey Sokolov 163ce94fee Merge pull request #2036 from RealKindOne/gitignore 
gitignore: Add more files
 2026-08-20 08:20:24 +01:00
Alexey Sokolov 836379a567 Merge pull request #2031 from RealKindOne/fix-motd-buffer 
Fix MOTD buffering to prevent duplicate 376 messages after rate limiting
 2026-08-17 08:29:54 +01:00
Alexey Sokolov 06536531eb Merge pull request #2033 from znc/dependabot/github_actions/github/codeql-action-4.37.3 
Bump github/codeql-action from 4 to 4.37.3
 2026-08-01 14:00:54 +01:00
Alexey Sokolov 038af89b90 CI: reenable asan, simplify config with anchors 2026-07-28 08:48:56 +01:00
Alexey Sokolov 3e95cf44a6 Restore test 
I somehow oversimplified it, breaking it
 2026-07-23 02:35:29 +01:00
Alexey Sokolov 133f0ad585 typo 2026-07-23 02:10:28 +01:00
Alexey Sokolov 7d4879ab26 Cleanup previous PR, add integration test for multiple joins 2026-07-22 09:24:52 +01:00
Alexey Sokolov 583c52866c Merge pull request #2030 from RealKindOne/fix-client-cycle 
Fix join/part not working when a client sends '/cycle' or '/hop'.
 2026-07-22 08:47:46 +01:00
Alexey Sokolov fe0f9be77a Merge pull request #2028 from znc/dependabot/github_actions/actions/checkout-7 
Bump actions/checkout from 6 to 7
 2026-07-19 20:37:53 +01:00
Alexey Sokolov 31e47f1193 Merge pull request #2027 from znc/dependabot/github_actions/codecov/codecov-action-7 
Bump codecov/codecov-action from 6 to 7
 2026-07-19 20:37:35 +01:00
Alexey Sokolov 6d470db241 Revert "Fix JOIN command not joining detached channels on other clients." 
This reverts commit ba32b092e9.

It broke /hop (/part+/join) due to race with server
 2026-07-19 20:35:31 +01:00
Alexey Sokolov 46cca361ab Merge pull request #2029 from RealKindOne/attachbugfix 
Fix JOIN command not joining detached channels on other clients.
 2026-07-02 19:39:05 +01:00
Alexey Sokolov c5014a1d20 Merge pull request #2025 from DarthGandalf/ssl111 
Remove support for OpenSSL<1.1.1

Accidentally readd support for LibreSSL which was accidentally removed in previous commit
 2026-06-30 23:41:58 +01:00
Alexey Sokolov 5bd5ecc5b8 Remove old ssl compatibility code 2026-06-29 19:19:40 +01:00
Alexey Sokolov f416b5ba60 update required openssl version after #2024 2026-06-29 19:07:43 +01:00
Alexey Sokolov e7919287fe Merge pull request #2021 from dxbjavid/copy-preserve-mode 
fileutils: open Copy() destination at the source's mode
 2026-06-09 23:24:33 +01:00
Alexey Sokolov 16062c87b1 Merge pull request #2020 from rootvector2/identfile-bound-spoof-read 
identfile: read original spoof with ReadFile
 2026-06-09 22:47:40 +01:00
Alexey Sokolov 042d827e4a Merge pull request #2023 from DarthGandalf/nossl 
Add CI job for ZNC without SSL support
 2026-06-08 23:03:02 +01:00
Alexey Sokolov 53ffcc909b add include 2026-06-08 22:43:13 +01:00
Alexey Sokolov 2a9359d1fb Merge branch 'nossl' of github.com:DarthGandalf/znc into nossl 2026-06-08 22:07:34 +01:00
Alexey Sokolov ad12a6011d Skip tests which require SSL 2026-06-08 22:07:11 +01:00
Alexey Sokolov 197a235764 test: Don't wait for SSL question if built without SSL 
And don't hardcode 6667 in preparation for #2022
 2026-06-08 21:54:34 +01:00
Alexey Sokolov 15c94bef77 Add CI job for ZNC without SSL support 2026-06-08 21:42:02 +01:00
Alexey Sokolov 56ed5c3f94 docker: update alpine 2026-05-07 20:15:53 +01:00
Alexey Sokolov f018a75cde Merge branch '1.10.x' 2026-05-07 20:07:54 +01:00
Alexey Sokolov eba009c49e Return version number to 1.10.x 2026-05-07 20:07:43 +01:00
Alexey Sokolov 59af2206c6 Increase the version number to 1.10.2 2026-05-07 20:00:42 +01:00
Alexey Sokolov a80cf49f5e Merge pull request #2018 from MarkLee131/fix/http-hardening-headers 
HTTPSock: emit standard hardening response headers
 2026-05-05 00:26:58 +01:00
Alexey Sokolov 663699b617 Merge pull request #2015 from MarkLee131/fix/cstring-empty-input-guards 
ZNCString: guard Replace/Split against empty-width arguments
 2026-05-04 22:05:49 +01:00
Alexey Sokolov 3584162177 CI: remove firefox 
It tries to be upgraded from snap, and fails
 2026-05-02 00:29:31 +01:00
Alexey Sokolov f35e565637 Merge pull request #2013 from MarkLee131/fix/base64-decode-ub 
ZNCString: avoid left shift of negative value in Base64Decode
 2026-05-01 22:23:24 +01:00
Alexey Sokolov 6186f611b9 Merge pull request #2017 from MarkLee131/fix/checkpass-constant-time 
User: use constant-time compare for MD5/SHA256/plain password paths
 2026-04-30 08:23:07 +01:00
Alexey Sokolov 866303eef0 Merge pull request #2014 from MarkLee131/fix/parseservertime-clamp-range 
Utils: reject out-of-range years in ParseServerTime
 2026-04-27 01:43:24 +01:00
Alexey Sokolov 7456cbaf02 Merge pull request #2016 from MarkLee131/fix/addheader-crlf-guard 
HTTPSock: reject CR/LF in AddHeader name/value
 2026-04-27 01:38:00 +01:00
Alexey Sokolov 8f5425f99c Merge pull request #1999 from znc/dependabot/github_actions/codecov/codecov-action-6 
Bump codecov/codecov-action from 5 to 6
 2026-04-25 11:46:08 +01:00
Alexey Sokolov 2a1844ee4e Merge pull request #2000 from znc/dependabot/github_actions/docker/login-action-4 
Bump docker/login-action from 3 to 4
 2026-04-25 11:45:34 +01:00
Alexey Sokolov 939d2b6c30 Merge pull request #1998 from znc/dependabot/github_actions/docker/metadata-action-6 
Bump docker/metadata-action from 5 to 6
 2026-04-25 11:45:05 +01:00
Alexey Sokolov 7540979707 Merge pull request #1997 from znc/dependabot/github_actions/docker/build-push-action-7 
Bump docker/build-push-action from 6 to 7
 2026-04-25 11:44:40 +01:00
Alexey Sokolov 0f1c646e5e Merge pull request #1991 from znc/dependabot/github_actions/actions/upload-artifact-7 
Bump actions/upload-artifact from 6 to 7
 2026-04-25 11:44:23 +01:00
Alexey Sokolov 94aa541793 ZNC 1.10.2-rc1 2026-04-23 21:19:26 +01:00
Alexey Sokolov 8566db72dd Merge pull request #1995 from jabberwock/fix/getparamscolon-bounds-check 
Message: add bounds check in GetParamsColon when uIdx >= params.size()
 2026-03-17 18:05:39 +00:00
Alexey Sokolov 55d34645de Merge pull request #1992 from TehPeGaSuS/patch-2 
Fix formatting in ZNC connection message
 2026-03-10 18:45:27 +00:00
Alexey Sokolov 84be3d0f0b Merge pull request #1990 from danny8376/webadmin-pass-w-space 
Fix webadmin serverlist parsing for password containing space
 2026-02-27 00:00:45 +00:00
Alexey Sokolov ad7bd6d7ee Don't try to join channel which ZNC is already on. 
When Goguma connects to ZNC, it joins the joined channels again and
again, triggering flood protection.

Note: even with this fix, the Goguma+ZNC experience is still pretty bad
and requires doing something about repeating chat history
 2026-01-26 22:15:23 +00:00
Alexey Sokolov a187ae180e Merge pull request #1987 from znc/dependabot/github_actions/actions/upload-artifact-6 
Bump actions/upload-artifact from 5 to 6
 2026-01-01 17:01:41 +00:00
Alexey Sokolov e9a1f0d975 Merge pull request #1989 from Un1matr1x/issues/1988 
Welcome to 2026
 2026-01-01 14:55:26 +00:00
Alexey Sokolov 418628a0d9 Merge pull request #1985 from znc/dependabot/github_actions/actions/checkout-6 
Bump actions/checkout from 5 to 6
 2025-12-12 01:09:26 +00:00
Alexey Sokolov 81a76a05b0 Merge pull request #1982 from bastelratte/syntax_de 
Update autoreply.de_DE.po
 2025-11-06 00:57:00 +00:00
Alexey Sokolov 2df0206d06 Merge pull request #1980 from znc/dependabot/github_actions/actions/upload-artifact-5 
Bump actions/upload-artifact from 4 to 5
 2025-11-01 12:38:56 +00:00
Alexey Sokolov cf889c1727 Merge pull request #1981 from znc/dependabot/github_actions/github/codeql-action-4 
Bump github/codeql-action from 3 to 4
 2025-11-01 12:38:19 +00:00
Alexey Sokolov 88bb3c4f77 Merge pull request #1976 from dannycolin/default-theme-dark-mode 
Add a dark mode to the default webskin
 2025-10-06 21:06:59 +01:00
Alexey Sokolov e0e8814045 Merge pull request #1974 from znc/dependabot/github_actions/actions/checkout-5 
Bump actions/checkout from 4 to 5
 2025-09-01 21:47:38 +01:00
Alexey Sokolov 1c417fda7e Merge pull request #1970 from tmzullinger/1.10.x 
modperl: avoid newAV_alloc_x which requires perl >= 5.35.1
 2025-08-01 08:14:57 +01:00
Alexey Sokolov 8890a7bb0d Merge branch '1.10.x' 2025-07-24 22:16:59 +01:00
Alexey Sokolov 2daae4358a Fix build when part of Boost was found 
Fix #1969
Ref #1934
 2025-07-24 22:15:16 +01:00
Alexey Sokolov bc75563dee Switch version back to git 1.10.x 2025-07-24 22:14:09 +01:00
Alexey Sokolov f891382570 ZNC 1.10.1 2025-07-24 22:14:09 +01:00
Alexey Sokolov d9d4277580 Merge pull request #1965 from RealKindOne/stripcontrols 
stripcontrols: Use new On...Message events.
 2025-07-15 08:02:30 +01:00
Alexey Sokolov 89781fc0a1 Merge pull request #1963 from RealKindOne/samplemodule 
sample: Use newer On...Message events.
 2025-07-07 22:02:13 +01:00
Alexey Sokolov 9597bee9a7 Merge pull request #1961 from RealKindOne/fix-chghost/away-notify 
Make account-notify, away-notify and chghost only send to client if the nick is in one of channels attached to a client

Fix #1826
 2025-07-07 08:33:31 +01:00
Alexey Sokolov 0cbd9e541f Merge branch '1.10.x' 2025-07-01 22:25:08 +01:00
Alexey Sokolov eff4196c47 Switch version back to git 1.10.x 2025-07-01 22:19:18 +01:00
Alexey Sokolov 29694fd26f ZNC 1.10.1 2025-07-01 22:16:21 +01:00
Alexey Sokolov 7b3e9c65b7 ZNC 1.10.1-rc1 2025-06-24 19:22:01 +01:00
Alexey Sokolov d48e215761 Merge branch '1.10.x' 2025-06-24 18:16:41 +01:00
Alexey Sokolov af975b2016 Merge pull request #1962 from DarthGandalf/bugs110 
Fix several bugs
 2025-06-24 18:11:24 +01:00
Alexey Sokolov c46bd41037 Unix listener: chmod and change group 
Fix #1955
 2025-06-24 09:04:29 +01:00
Alexey Sokolov 3b4e5d6951 Merge pull request #1959 from RealKindOne/patch-1 
raw: show ZNC->IRC traffic
 2025-06-24 00:26:47 +01:00
Alexey Sokolov 4b12c0dc3c Fix nullptr dereference 
If client sends TAGMSG while server is not connected
 2025-06-23 22:52:34 +01:00
Alexey Sokolov 7b7f691213 Don't store "this" in static variable 
Fix #1960

This could also cause use-after-free if the first connected socket disconnects
 2025-06-23 22:41:08 +01:00
Alexey Sokolov 795d843ee4 Merge pull request #1957 from RealKindOne/logmodule 
log: Use new On...Message for events.
 2025-06-19 22:45:58 +01:00
Alexey Sokolov eff347ff85 Merge branch '1.10.x' 2025-06-15 08:08:44 +01:00
Alexey Sokolov 954070bacf Merge pull request #1956 from RealKindOne/disablecapfix 
Make ZNC save the DisableClientCap/DisableServerCap settings.
 2025-06-15 08:06:01 +01:00
Alexey Sokolov 7e5a26739b Merge branch '1.10.x' 2025-06-09 22:29:32 +01:00
Alexey Sokolov 543e12cb6a Docker for git version: update alpine to 3.22 2025-06-09 22:29:04 +01:00
Alexey Sokolov 7dc24e79fd Update crowdin config for 1.10.x branch 2025-06-09 22:03:55 +01:00
Alexey Sokolov cb0a5e4018 Update version to 1.11 in master branch 2025-06-09 22:03:14 +01:00
Alexey Sokolov 5e3fecbcf1 Update future version to 1.10.1 in the 1.10.x branch 2025-06-09 22:01:20 +01:00
Alexey Sokolov 075cd3897f Increase the version number to 1.10.0 2025-06-09 21:41:36 +01:00
Alexey Sokolov b32d3dbbc9 Fix test on cygwin 
Depending on timing between client and server, the initial JOIN can come in either order - in one case forwarding directly from client, in another joining the channels after client disconnected.
 2025-06-09 20:20:50 +01:00