fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix audit findings: logout notice language after uid unmap, gRPC rehash reports load failure and emits the staff-log line, cap reflected CTCP PING token
All checks were successful
CI / check (push) Successful in 5m47s
Details

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-20 18:26:49 +00:00
parent fadd4f37cd
commit a2bf5ed553
No known key found for this signature in database
5 changed files with 50 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

12
src/engine/dispatch.rs
View file

@ -12,7 +12,17 @@ impl Engine {
let arg = parts.next().unwrap_or("");
let response = match cmd.as_str() {
"VERSION" => format!("VERSION {}", crate::version::short()),
"PING" => format!("PING {arg}"),
"PING" => {
// Reflect the client's token, but cap it: an over-long token would
// push the client-facing line past 512 once the ircd expands our
// short service source into a full nick!user@host, stranding the
// closing \x01. A real PING token is a short timestamp.
let mut n = arg.len().min(200);
while !arg.is_char_boundary(n) {
n -= 1;
}
format!("PING {}", &arg[..n])
}
"TIME" => format!("TIME {}", echo_api::human_time(self.now_secs())),
"CLIENTINFO" => "CLIENTINFO ACTION CLIENTINFO PING TIME VERSION".to_string(),
_ => return None, // ACTION and unknown CTCPs: stay silent