Commit Graph
6048 Commits
Author SHA1 Message Date
RealKindOne bc25a36972 listsockets: Fix 1970s date bug.
Fixes #1910
2026-10-01 15:26:10 -04:00
Alexey Sokolov 1158f3bf58 Merge pull request #2046 from znc/dependabot/github_actions/github/codeql-action-4.38.2
build(deps): bump github/codeql-action from 4.37.3 to 4.38.2
2026-10-01 19:47:29 +01:00
dependabot[bot] 10f78dc22c build(deps): bump github/codeql-action from 4.37.3 to 4.38.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.3 to 4.38.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.37.3...v4.38.2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-10-01 12:36:12 +00:00
Alexey Sokolov 4a19b6ffb1 Merge pull request #2042 from RealKindOne/bugfixes
Stop znc from prepending '#' in join command if missing and fix corecaps wiki link.
2026-09-22 01:12:03 +01:00
RealKindOne d6c2c32de8 Stop ZNC from prepending '#' if missing in join command.
Fixes #1794
2026-09-13 14:20:36 -04:00
RealKindOne 18f304e6a4 corecaps: Add missing wiki info. 2026-09-13 14:19:50 -04:00
Alexey Sokolov 9c9ad77afa update freebsd readme badge url 2026-09-13 13:46:48 +01:00
RealKindOne 30d14d0841 Improve test coverage for clearbufferonmsg, crypt, ctcpflood, and watch.
Close #2038
2026-09-13 11:27:54 +01:00
RealKindOne cdf29c0dd4 awaystore: Fix NoSSL and GCC ASin build 2026-09-13 11:27:31 +01:00
RealKindOne ff65bc01fb awaystore: Modernize and add test. Fixed various bugs.
Fixed 'pass' command to save password in CBlowfish(MD5(...)) instead of plaintext.

Fixed 'away' command not updating with a new away message if already away.

Fixed default timer in SetArgsHelpText to match SetAwayTime().

Fixed broken 'Messages' command.

Fixed 'replay' command with IPv6

Fixes #815
2026-09-13 11:27:31 +01:00
RealKindOne 375e744298 autoattach: use const CString& in TryAttach and simplify On...Message events.
TryAttach() only reads and never mutates.
2026-09-13 11:27:31 +01:00
RealKindOne 0b860b23bf Fix chansaver test. 2026-09-13 11:27:31 +01:00
RealKindOne 97e3932f03 Fix autoreply, chansaver, and stickychan test. 2026-09-13 11:27:31 +01:00
RealKindOne e7d188c3ec watch: Modernize and update test. 2026-09-13 11:27:31 +01:00
RealKindOne bbfec24e6b stichychan: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne ecaf056d47 nickserv: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne 9dbf062d87 kickrejoin: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne ec49f11be6 keepnick: Modernize and update test. 2026-09-13 11:27:31 +01:00
RealKindOne cec9741003 flooddetach: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne ca24ae726c ctcpflood: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne 2a2b6068e8 clearbufferonmsg: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne 28b9d8cbfb chansaver: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne 97b1e8ab79 bouncedcc: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne 0832094976 autoreply: Modernize and add test. 2026-09-13 11:27:31 +01:00
RealKindOne a75612dd15 autoattach: Modernize and update test. 2026-09-13 11:27:31 +01:00
Alexey Sokolov 76cdad9e6a Merge branch '1.10.x' 2026-09-13 10:54:57 +01:00
Alexey Sokolov 2fb9746406 Return version number to 1.10.x 2026-09-13 09:10:25 +01:00
Alexey Sokolov 6bd91573ce Increase the version number to 1.10.3 znc-1.10.3 2026-09-13 09:05:34 +01:00
RealKindOne af5cdd0192 crypt: Modernize and add test. Fix OnNumericMessage 332 issue.
It was possible to trigger null pointer dereference during
OnNumericMessage

The affected versions are 1.7.0+

CVE-2026-82374
2026-09-12 19:08:21 +01:00
Alexey Sokolov 4b88c64c6e Fix crash while unloading modules
The bug allowed unprivileged users to trigger use-after-free while
unloading modules

Note that the fix requires a slight API change for OnEmbeddedWebRequest:
now the callers (webadmin is the only known caller of it) call it via
DoEmbeddedWebRequest() instead. The modules which implement this hook
need no changes.

CVE-2026-82373

Found by Claude from Anthropic, reported by Ada Logics.
2026-09-12 19:08:21 +01:00
Alexey Sokolov b7cc2151ff Merge branch '1.10.x' 2026-09-06 09:49:10 +01:00
Alexey Sokolov d9b392afd9 Update jQuery to 3.5.1
Fix #2040
CVE-2020-11022, CVE-2020-11023
2026-09-06 09:45:58 +01:00
Alexey Sokolov fe8d43f828 Merge pull request #2037 from RealKindOne/fixtest
Fix MotdBufferDoesNotAccumulate376 test.
2026-08-21 20:32:25 +01:00
RealKindOne a2b0decb8e Fix MotdBufferDoesNotAccumulate376 test. 2026-08-21 03:37:07 -04:00
Alexey Sokolov 163ce94fee Merge pull request #2036 from RealKindOne/gitignore
gitignore: Add more files
2026-08-20 08:20:24 +01:00
RealKindOne 8982db7df5 gitignore: Add more files 2026-08-19 21:52:17 -04:00
ZNC-Jenkins a63fe12c63 Update translations from Crowdin for bg_BG da_DK de_DE el_GR es_ES fr_FR id_ID it_IT nl_NL pl_PL pt_BR pt_PT ro_RO ru_RU tr_TR 2026-08-18 00:26:44 +00:00
Alexey Sokolov 836379a567 Merge pull request #2031 from RealKindOne/fix-motd-buffer
Fix MOTD buffering to prevent duplicate 376 messages after rate limiting
2026-08-17 08:29:54 +01:00
ZNC-Jenkins 9623585d22 Update translations from Crowdin for fr_FR 2026-08-08 00:26:34 +00:00
ZNC-Jenkins a0778c296e Update translations from Crowdin for fr_FR 2026-08-08 00:26:33 +00:00
Alexey Sokolov 06536531eb Merge pull request #2033 from znc/dependabot/github_actions/github/codeql-action-4.37.3
Bump github/codeql-action from 4 to 4.37.3
2026-08-01 14:00:54 +01:00
dependabot[bot] 07ecd573ea Bump github/codeql-action from 4 to 4.37.3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-01 12:33:44 +00:00
Alexey Sokolov 038af89b90 CI: reenable asan, simplify config with anchors 2026-07-28 08:48:56 +01:00
RealKindOne 4fbccd0cc4 Fix MOTD buffering to prevent duplicate 376 messages after rate limiting
Added m_bMotdBegun flag to track MOTD state. MOTD lines (372, 376) are now only
buffered if MOTD has begun (375/422), and 376 itself is not buffered.

The flag is reset on 263 rate limit responses to prevent repeat 376 messages.

Fixes #1460
2026-07-23 04:38:56 -04:00
Alexey Sokolov 3e95cf44a6 Restore test
I somehow oversimplified it, breaking it
2026-07-23 02:35:29 +01:00
Alexey Sokolov 133f0ad585 typo 2026-07-23 02:10:28 +01:00
ZNC-Jenkins b98d7a9389 Update translations from Crowdin for bg_BG da_DK de_DE el_GR es_ES fr_FR id_ID it_IT nl_NL pl_PL pt_BR pt_PT ro_RO ru_RU tr_TR 2026-07-23 00:27:10 +00:00
Alexey Sokolov 7d4879ab26 Cleanup previous PR, add integration test for multiple joins 2026-07-22 09:24:52 +01:00
Alexey Sokolov 583c52866c Merge pull request #2030 from RealKindOne/fix-client-cycle
Fix join/part not working when a client sends '/cycle' or '/hop'.
2026-07-22 08:47:46 +01:00
RealKindOne d2fc5d550a Apply fixes for IsParting() pull request. 2026-07-22 01:58:01 -04:00