|
|
621f06448d
|
test: property-based fuzzing (proptest) for every untrusted-input parser — message line, PROXY header, WebSocket frame, regex engine, ban-mask, duration; asserts no-panic + round-trip/idempotence/bounds invariants
|
2026-08-18 22:17:17 +00:00 |
|
|
|
cf2b157842
|
perf: to_channel shares one Arc<str> across all broadcast recipients instead of cloning the line per member (server-time members share a single time-tagged variant); single-recipient sends unchanged
|
2026-08-18 20:30:07 +00:00 |
|
|
|
fc58113db9
|
tls: add opt-in pure-Rust rustls backend behind the TlsBackend trait (tls_backend = rustls; default stays openssl) — TLS1.3, CertFP via handshake-sig verify, SNI, REHASH reload; bump integration timeouts for loaded-host robustness
|
2026-08-18 20:20:21 +00:00 |
|
|
|
2565089666
|
gitignore runtime *.db state (reputation.db/permchannels.db) — untrack; they must never be committed
|
2026-08-18 19:55:11 +00:00 |
|
|
|
20b49add0b
|
perf: mimalloc global allocator + aHash maps + memchr line framer + LTO/codegen-units=1 — ~29% faster channel fanout; and drop the bogus openssl+mio dependency whitelist from the guard (any perf crate is welcome now)
|
2026-08-18 19:45:33 +00:00 |
|
|
|
687c91638b
|
remove some stupid text.
|
2026-08-18 19:26:22 +00:00 |
|
|
|
33a18b81cc
|
channelban: leave the a: (account) extban mask verbatim — normalize_ban_mask was appending !*@* and breaking account matching
|
2026-08-18 15:59:00 +00:00 |
|
|
|
bcd958d2d3
|
ircv3: close server-support-table gaps — BOT=B ISUPPORT, account-extban (a: matcher + ACCOUNTEXTBAN=a), draft/read-marker cap (gates MARKREAD sync), and no-implicit-names (suppress the post-JOIN NAMES burst)
|
2026-08-18 15:56:59 +00:00 |
|
|
|
c9bd8e7492
|
channel-rename: implement IRCv3 draft/channel-rename — RENAME command + cap, in-place rename (RENAME for cap clients, PART/JOIN fallback for the rest), and S2S propagation
|
2026-08-17 23:45:02 +00:00 |
|
|
|
755e835baf
|
snoop: only announce a client's exit if it registered — an unregistered liveness/health probe was spamming the +q snomask (regression from firing on_user_quit for all users)
|
2026-08-17 22:49:29 +00:00 |
|
|
|
244feb9f45
|
reactor: bound the blocking TLS handshake (proxied-TLS path) with tls_handshake_timeout so a stalled handshake can't pin a thread/socket
|
2026-08-17 22:13:37 +00:00 |
|
|
|
7563daf3a3
|
account_registration: GC the per-IP rate-limit table on the tick (an entry per distinct registering IP was never dropped)
|
2026-08-17 22:13:37 +00:00 |
|
|
|
e28efb03e6
|
callerid: cap the auto-accept list like the explicit ACCEPT command
|
2026-08-17 21:37:19 +00:00 |
|
|
|
fad66eaac2
|
chathistory: GC conversation keys idle past chathistory_maxage (default 7d) — the key set never shrank
|
2026-08-17 21:37:19 +00:00 |
|
|
|
5522e36125
|
reactor: reap proxy-pending connections that never send their PROXY header (were never timed out)
|
2026-08-17 21:37:18 +00:00 |
|
|
|
de4cf9866d
|
channel: scrub a departed user from every +i invite list (invited-then-quit leaked a Uid on persistent channels)
|
2026-08-17 21:37:18 +00:00 |
|
|
|
0da0906dc9
|
core: fire on_user_quit for unregistered users too — pre-registration module state (captcha Challenged/Verified) leaked one Uid per held-then-dropped bot
|
2026-08-17 21:37:18 +00:00 |
|
|
|
f2e23fffa9
|
captcha: issue the challenge once per held client, not on every command they send
|
2026-08-17 20:37:51 +00:00 |
|
|
|
d6cc813aad
|
channel: reclaim departed-member +f flood counters and expired +J entries on the tick (slow high-churn leak)
|
2026-08-17 20:37:51 +00:00 |
|
|
|
92a3f5ba86
|
s2s: propagate CHGHOST/CHGIDENT host/ident changes to links (were applied locally only); inbound path uses a non-propagating variant to avoid a loop
|
2026-08-17 19:38:58 +00:00 |
|
|
|
73f8ff58ed
|
s2s: enforce servprotect on a remote KILL and rank-vs-victim on a remote KICK (matching the local paths)
|
2026-08-17 19:38:58 +00:00 |
|
|
|
da36d5c32a
|
s2s: FJOIN TS arbitration wipes list modes+topic on loss and merges on equal TS; arbitrate remote-remote nick collisions (rewrite forward); IJOIN/FTOPIC channel-TS handling
|
2026-08-17 19:32:18 +00:00 |
|
|
|
4b86de3b62
|
registration: add a Hold verdict so captcha/challenge modules pend the client for the challenge instead of tearing the link down
|
2026-08-17 19:06:17 +00:00 |
|
|
|
99eb9c74f3
|
relaymsg: gate RELAYMSG on oper (it spoofs an arbitrary source nick), matching InspIRCd
|
2026-08-17 19:06:17 +00:00 |
|
|
|
d6f27ac56c
|
securitygroups: honor tls=no/account=no/etc. instead of inverting them to require
|
2026-08-17 15:05:13 +00:00 |
|
|
|
edb10a6607
|
connectban: never collapse the ban mask to * on a sub-/8 CIDR (would z-line the whole network)
|
2026-08-17 15:05:13 +00:00 |
|
|
|
58d5a0e5a5
|
message: keep +U opmoderated messages out of CHATHISTORY/+H replay, and subject TAGMSG to the same PM gates (+c/+R/+z/+g/SILENCE)
|
2026-08-17 15:05:13 +00:00 |
|
|
|
45f4ee552d
|
xline: remove masks case-insensitively, matching how they're enforced
|
2026-08-17 14:52:38 +00:00 |
|
|
|
480b5faea0
|
sanick/svsnick: allow a case-only rename (in-use check matched the target itself)
|
2026-08-17 14:52:38 +00:00 |
|
|
|
8ed2003546
|
callerid: scrub a departed/renamed nick from ACCEPT lists so it can't be reused to bypass +g
|
2026-08-17 14:52:38 +00:00 |
|
|
|
c1b7ed6dda
|
channel: count remote members for +l, and propagate TBAN expiry (-b) over S2S
|
2026-08-17 14:52:38 +00:00 |
|
|
|
713406870b
|
who: hide +u auditorium and +D delayjoin members on WHO #chan, matching NAMES
|
2026-08-17 14:52:38 +00:00 |
|
|
|
3d7ee6b586
|
reputation: count remote/services channel members toward the minchanmembers gate (score was frozen)
|
2026-08-17 13:27:58 +00:00 |
|
|
|
62c0141362
|
test: services standard reply (SWSTDRPL) reaches a standard-replies client
|
2026-08-17 13:12:31 +00:00 |
|
|
|
5722640957
|
s2s: handle echo's metadata profile keys, standard replies, OPERTYPE and REDACT; emit ssl_cert + OPERTYPE
|
2026-08-17 13:08:14 +00:00 |
|
|
|
8f765bfba7
|
s2s: deliver server-sourced NOTICE/PRIVMSG (services SET SNOTICE) instead of dropping it
|
2026-08-17 11:40:46 +00:00 |
|
|
|
0f28083855
|
markread: persist account-keyed read markers to disk and restore them at startup
|
2026-08-17 02:12:17 +00:00 |
|
|
|
3f9aa8c6eb
|
channel: cull an empty channel when a mode change (-P/-r) removes its last reason to persist
|
2026-08-17 01:50:11 +00:00 |
|
|
|
b451ccbfd8
|
permchannels: persist +P channels (modes, topic, ts, list modes) to disk and restore them at startup
|
2026-08-17 01:43:29 +00:00 |
|
|
|
978f8f8f82
|
reputation: persist the score table on each bump/expire so restarts don't revert to a stale snapshot
|
2026-08-17 01:19:57 +00:00 |
|
|
|
e10ea609ed
|
s2s: apply inbound CHGHOST/CHGIDENT (services vhost) instead of dropping it
|
2026-08-17 00:36:03 +00:00 |
|
|
|
2ce6a5619c
|
docs: note REHASH cert reload and the tls_sni per-hostname cert key
|
2026-08-16 23:37:34 +00:00 |
|
|
|
471fc00dfc
|
tls: reload certs on REHASH (renewed cert applies without restart) and add per-hostname SNI via tls_sni
|
2026-08-16 23:35:36 +00:00 |
|
|
|
a6293d5bbc
|
docs: document cloak_method and the account/fingerprint/static cloak keys
|
2026-08-16 19:52:27 +00:00 |
|
|
|
6efbcb6db0
|
cloak: config-selectable methods (account, fingerprint, static) alongside the default hmac-sha256
|
2026-08-16 19:49:26 +00:00 |
|
|
|
262699bf30
|
kick: route KICK of a remote channel member to its server and drop the local view
|
2026-08-16 19:31:49 +00:00 |
|
|
|
68b80c3f82
|
s2s: announce remote members arriving via FJOIN to local channel members
|
2026-08-16 19:26:10 +00:00 |
|
|
|
ef84846267
|
invite: route INVITE for a remote target to its server and deliver inbound INVITE
|
2026-08-16 19:11:57 +00:00 |
|
|
|
559a102e48
|
add oper SQUIT command to disconnect a linked server by name
|
2026-08-16 19:10:29 +00:00 |
|
|
|
d4a7043d10
|
s2s: resolve nick collisions by timestamp (force-rename loser to its UUID, SAVE) instead of killing; services always keep their nick
|
2026-08-16 19:03:07 +00:00 |
|
