fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Cap certfp, channel access, and akick lists to bound attacker-driven log growth

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-19 13:27:50 +00:00
parent d833dc28f0
commit 64c4bbeae4
No known key found for this signature in database
4 changed files with 25 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/nickserv/src/cert.rs
View file

@ -33,6 +33,7 @@ pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, db:
Ok(()) => ctx.notice(me, from.uid, format!("Added fingerprint \x02{fp}\x02. You can now log in with SASL EXTERNAL.")),
Err(CertError::InUse) => ctx.notice(me, from.uid, "That fingerprint is already registered."),
Err(CertError::Invalid) => ctx.notice(me, from.uid, "That does not look like a certificate fingerprint."),
Err(CertError::Full) => ctx.notice(me, from.uid, "You have too many fingerprints registered. Remove one first."),
Err(CertError::NoAccount | CertError::Internal) => ctx.notice(me, from.uid, "Could not add the fingerprint, please try again later."),
}
}