]>
jfr.im git - solanum.git/log
Ed Kellett [Sun, 12 Apr 2020 01:09:12 +0000 (02:09 +0100)]
Don't match iline-spoofed IPs for channel bans
Ed Kellett [Sun, 12 Apr 2020 01:07:17 +0000 (02:07 +0100)]
Centralise banmask matching logic
Aaron Jones [Sun, 15 Mar 2020 22:14:26 +0000 (22:14 +0000)]
Merge pull request #311 from qaisjp/patch-2
readme: fix macOS instructions
Qais Patankar [Sun, 15 Mar 2020 22:06:42 +0000 (22:06 +0000)]
readme: fix macOS instructions
Aaron Jones [Tue, 28 Jan 2020 20:46:14 +0000 (20:46 +0000)]
extensions/extb_ssl.c: make certfp parameter case-insensitive
I had the idea that maybe these should be case-sensitive because some
encodings (like Base-64) are. But it turns out it's better to
prioritise not breaking existing configurations / channel mode lists,
and just revisit this in future maybe.
[ci skip]
Aaron Jones [Tue, 28 Jan 2020 20:37:39 +0000 (20:37 +0000)]
extensions/extb_ssl.c: port
e0f1c3b5bc6c55b88938 &
5572f43834b93b898ea0
Reported-by: Opal Hart <redacted>
Simon Arlott [Sat, 11 Jan 2020 16:25:18 +0000 (16:25 +0000)]
tests: Check sendto_wallops_flags works with format strings
Aaron Jones [Fri, 10 Jan 2020 15:36:06 +0000 (15:36 +0000)]
Merge pull request #308 from edk0/with-asan
Add --with-asan to build with asan
Ed Kellett [Fri, 10 Jan 2020 15:32:35 +0000 (15:32 +0000)]
Link asan in a clang-friendly way
Ed Kellett [Mon, 6 Jan 2020 23:46:44 +0000 (23:46 +0000)]
Add --with-asan to build with asan
Aaron Jones [Fri, 3 Jan 2020 17:33:10 +0000 (17:33 +0000)]
Merge pull request #304 from edk0/reject-expired
reject: Don't reject for expired K-lines
Ed Kellett [Fri, 3 Jan 2020 17:07:25 +0000 (17:07 +0000)]
reject: reorder to avoid leaks
Ed Kellett [Fri, 3 Jan 2020 16:24:36 +0000 (16:24 +0000)]
reject: Don't reject for expired K-lines
Aaron Jones [Thu, 2 Jan 2020 20:31:06 +0000 (20:31 +0000)]
Merge pull request #302 from edk0/sasl-usercloak
Import extensions/sasl_usercloak from ircd-seven
Aaron Jones [Thu, 2 Jan 2020 20:29:13 +0000 (20:29 +0000)]
Merge pull request #297 from bmwiedemann/date
Set EXTERNAL_BUILD_TIMESTAMP from SOURCE_DATE_EPOCH
Aaron Jones [Thu, 2 Jan 2020 17:24:44 +0000 (17:24 +0000)]
Merge pull request #303 from edk0/modreload-uaf
modules: fix use-after-free when reloading
Aaron Jones [Thu, 2 Jan 2020 17:24:25 +0000 (17:24 +0000)]
Merge pull request #301 from edk0/reject-free-fix-fix
Remove from the list of propagated bans on expiry
Ed Kellett [Thu, 2 Jan 2020 16:39:35 +0000 (16:39 +0000)]
modules: fix use-after-free when reloading
Ed Kellett [Thu, 2 Jan 2020 16:29:23 +0000 (16:29 +0000)]
sasl_usercloak: fix typo in format string
thanks @ProgVal
Ed Kellett [Thu, 2 Jan 2020 15:49:15 +0000 (15:49 +0000)]
sasl_usercloak: make the magic string more specific
Require '/account' at the end of the spoof, rather than
'account' anywhere.
Ed Kellett [Thu, 2 Jan 2020 03:35:37 +0000 (03:35 +0000)]
sasl_usercloak: modernize
Ed Kellett [Sat, 25 Nov 2017 23:54:43 +0000 (23:54 +0000)]
Remove duplicated notify_banned_client
Ed Kellett [Sat, 25 Nov 2017 22:53:45 +0000 (22:53 +0000)]
sasl_usercloak: check K-lines after host change
Ed Kellett [Wed, 4 Jan 2017 18:36:07 +0000 (18:36 +0000)]
Revert "recheck users after applying SASL account cloaks"
This reverts commit
4d401d3c60019cf96b07a012106cab9678b7a79d .
Ed Kellett [Tue, 27 Dec 2016 23:06:20 +0000 (23:06 +0000)]
recheck users after applying SASL account cloaks
(so K-lines on them will take effect properly)
Stephen Bennett [Tue, 2 Feb 2010 21:31:50 +0000 (21:31 +0000)]
Make sasl_usercloak.so update the original host, as well as the visible host if it hasn't already changed. Allows for the sasl spoof to be used to override services ones in some circumstances.
Stephen Bennett [Sat, 30 Jan 2010 19:57:35 +0000 (19:57 +0000)]
Be sure to zero out host buffer before using it
Stephen Bennett [Fri, 29 Jan 2010 23:29:00 +0000 (23:29 +0000)]
Add sasl_usercloak module, to allow injecting SASL account name into a user's host on connection
Ed Kellett [Wed, 1 Jan 2020 23:58:00 +0000 (23:58 +0000)]
Remove from the list of propagated bans on expiry
Fixes a use-after-free introduced in
548e31d3b , which fixed a related
use-after-free introduced in
a9536f755 .
Aaron Jones [Wed, 1 Jan 2020 08:57:52 +0000 (08:57 +0000)]
Merge pull request #300 from edk0/reject-free-fix
Fix a use-after-free introduced in #298
Ed Kellett [Wed, 1 Jan 2020 08:48:50 +0000 (08:48 +0000)]
Fix a place aconfs could be freed while referenced
(not a bug until
a9536f755 since bans were not referenced before)
Aaron Jones [Tue, 31 Dec 2019 08:00:24 +0000 (08:00 +0000)]
Merge pull request #299 from edk0/tkline-reason
Add config option to hide durations of temporary K/D-lines
Aaron Jones [Tue, 31 Dec 2019 07:59:56 +0000 (07:59 +0000)]
Merge pull request #298 from edk0/rejectcache
Remember and send reasons for rejectcache rejections
Ed Kellett [Tue, 31 Dec 2019 01:50:24 +0000 (01:50 +0000)]
Add hide_tkdline_duration to documentation .confs
Ed Kellett [Tue, 31 Dec 2019 01:34:06 +0000 (01:34 +0000)]
Add general::hide_tkdline_duration
Ed Kellett [Tue, 31 Dec 2019 01:11:45 +0000 (01:11 +0000)]
reject: Remember and send reasons for rejections
rejectcache entries can now use either a K-line aconf or a static
string as a reason. This will be sent in a 465 numeric before the usual
ERROR. In the case of K-lines, it resembles the 465 you would have been
sent without being rejected:
; nc -s 127.6.6.6 127.0.0.1 5000
:staberinde.local 465 * :You are banned from this server- Temporary
K-line 4320 min. - abc123 (2019/12/31 01.07)
ERROR :Closing Link: (*** Banned (cache))
; nc -s 127.128.0.0 127.0.0.1 5000
:staberinde.local 465 * :You are not authorised to use this server.
ERROR :Closing Link: (*** Banned (cache))
Bernhard M. Wiedemann [Fri, 6 Dec 2019 17:32:46 +0000 (18:32 +0100)]
Set EXTERNAL_BUILD_TIMESTAMP from SOURCE_DATE_EPOCH
to make the package build reproducible by default without
everyone having to discover the custom variable.
See https://reproducible-builds.org/ for why this is good
and https://reproducible-builds.org/specs/source-date-epoch/
for the definition of this variable.
This code assigns the plain integer to keep the code simple.
Otherwise we would have to deal with differences between GNU date
and BSD date or include extra build deps like perl or python.
Aaron Jones [Sun, 17 Nov 2019 19:12:03 +0000 (19:12 +0000)]
Merge pull request #296 from edk0/modreload
m_modules: make modreload work like restart
Ed Kellett [Sun, 17 Nov 2019 11:15:47 +0000 (11:15 +0000)]
m_modules: make modreload work like restart
/modrestart used to be implemented as a normal command and could crash
when used remotely because it would reload m_encap, which was on the
call stack at the time. This was fixed in
41390bfe5f . However,
/modreload has exactly the same problem, so I'm giving it the
same treatment.
Incidentally: This bug was first discovered in ircd-seven, where the
`/mod*` commands themselves live in the core, so m_encap was the only way
the crash could happen (and it didn't most of the time, because m_encap
would only be moved if you got unlucky). But `/mod*` are in modules in
charybdis, so /modrestart would have unloaded the code it was in the
middle of executing. With that in mind, I'm not sure how it ever
appeared to work.
Aaron Jones [Tue, 22 Oct 2019 18:33:51 +0000 (18:33 +0000)]
Merge pull request #287 from edk0/filter
Add extensions/filter (port from ircd-seven)
Ed Kellett [Tue, 22 Oct 2019 17:44:19 +0000 (18:44 +0100)]
filter: avoid a memory leak per @amdj
Aaron Jones [Tue, 22 Oct 2019 16:17:33 +0000 (16:17 +0000)]
Merge pull request #293 from edk0/webirc
m_webirc: improve TLS handling
Aaron Jones [Tue, 22 Oct 2019 16:16:36 +0000 (16:16 +0000)]
Merge pull request #294 from edk0/deny-webirc-auth
m_webirc: deny using webirc. as a real auth block
Ed Kellett [Sun, 20 Oct 2019 17:39:29 +0000 (18:39 +0100)]
m_webirc: deny using webirc. as a real auth block
Ed Kellett [Sun, 20 Oct 2019 17:01:27 +0000 (18:01 +0100)]
m_webirc: it's "TLS" to you
Ed Kellett [Thu, 13 Jun 2019 22:31:32 +0000 (23:31 +0100)]
m_webirc: don't bail out when denying 'secure'
Ed Kellett [Wed, 12 Jun 2019 22:06:50 +0000 (23:06 +0100)]
m_webirc: const-correctness
Ed Kellett [Sun, 9 Jun 2019 00:12:52 +0000 (01:12 +0100)]
m_webirc: respect ircv3's `secure` option
Ed Kellett [Sun, 9 Jun 2019 00:11:58 +0000 (01:11 +0100)]
m_webirc: enforce need_ssl
Aaron Jones [Mon, 7 Oct 2019 03:48:57 +0000 (03:48 +0000)]
tests/Makefile.am: check-local: don't depend on extensions/*
This breaks if a file in extensions/ doesn't get built due to
conditional compilation, and the tests don't need anything
under extensions/ anyway.
Aaron Jones [Sun, 6 Oct 2019 22:23:59 +0000 (22:23 +0000)]
Merge pull request #286 from edk0/strip-unprintable
strip_unprintable: Don't strip all bytes with the MSB set
Janik Kleinhoff [Thu, 25 Oct 2018 20:31:46 +0000 (20:31 +0000)]
strip_unprintable: clarify type conversion
This type conversion is more easily shown to work as intended than the
conversion introduced in
9dcb9e169 .
Ed Kellett [Tue, 25 Sep 2018 11:48:22 +0000 (12:48 +0100)]
Fix strip_unprintable on high bit bytes
Aaron Jones [Sun, 6 Oct 2019 21:57:42 +0000 (21:57 +0000)]
Merge pull request #290 from edk0/quiet-override
override: don't spam about (un)setting the mode
Aaron Jones [Sun, 6 Oct 2019 21:51:20 +0000 (21:51 +0000)]
Merge pull request #289 from edk0/rehash-privileged-modes
Recheck umodes for opers after rehash
Ed Kellett [Sun, 6 Oct 2019 21:23:44 +0000 (22:23 +0100)]
override: don't spam about (un)setting the mode
We will spam about any uses of it, so this just seems like extra noise.
Ed Kellett [Sun, 6 Oct 2019 20:56:13 +0000 (21:56 +0100)]
Recheck umodes for opers after rehash
Ed Kellett [Sun, 6 Oct 2019 18:41:06 +0000 (19:41 +0100)]
filter: explicit type conversion
Ed Kellett [Sun, 6 Oct 2019 18:35:17 +0000 (19:35 +0100)]
Add hyperscan to CI deps
Ed Kellett [Sat, 5 Oct 2019 23:41:56 +0000 (00:41 +0100)]
filter: correct type for modinit
Ed Kellett [Sat, 5 Oct 2019 23:17:49 +0000 (00:17 +0100)]
Fix build when hyperscan is missing
Ed Kellett [Sat, 5 Oct 2019 21:05:15 +0000 (22:05 +0100)]
filter: use AV2
Ed Kellett [Thu, 4 Apr 2019 23:13:34 +0000 (00:13 +0100)]
filter: add DROP and ABORT
Ed Kellett [Wed, 3 Apr 2019 11:16:44 +0000 (12:16 +0100)]
filter: require an extra "+" before data
This disambiguates it from control commands
Ed Kellett [Sun, 7 Apr 2019 19:45:38 +0000 (20:45 +0100)]
filter: add modes to disable incoming filters
Ed Kellett [Thu, 20 Sep 2018 19:02:19 +0000 (19:02 +0000)]
filter: make the kill reason more honest
Ed Kellett [Tue, 14 Aug 2018 21:41:24 +0000 (22:41 +0100)]
filter: send the failure response only on PRIVMSG
Ed Kellett [Tue, 14 Aug 2018 21:38:51 +0000 (22:38 +0100)]
filter: match in two passes, before and after stripping
Ed Kellett [Tue, 14 Aug 2018 21:37:58 +0000 (22:37 +0100)]
filter: move to extensions
Ed Kellett [Sat, 11 Aug 2018 22:45:22 +0000 (23:45 +0100)]
filter: bump version
Ed Kellett [Fri, 10 Aug 2018 20:52:03 +0000 (21:52 +0100)]
filter: use a static buffer instead of strdup
Ed Kellett [Fri, 10 Aug 2018 15:24:37 +0000 (16:24 +0100)]
filter: add version number
Ed Kellett [Fri, 10 Aug 2018 14:05:13 +0000 (15:05 +0100)]
filter: send a numeric error for ACT_DROP
Ed Kellett [Fri, 10 Aug 2018 14:04:32 +0000 (15:04 +0100)]
filter: add #defines for nick,user,host
Ed Kellett [Fri, 10 Aug 2018 02:32:21 +0000 (03:32 +0100)]
filter: don't give the target of PMs to filters
Ed Kellett [Thu, 9 Aug 2018 22:39:19 +0000 (23:39 +0100)]
filter: include identified marker
Ed Kellett [Thu, 9 Aug 2018 13:53:54 +0000 (14:53 +0100)]
filter: drop messages if we're ACT_KILLing them
Ed Kellett [Thu, 9 Aug 2018 13:51:02 +0000 (14:51 +0100)]
filter: Filter only locally-sourced messages
(Assume the remote server filtered remote ones.)
Ed Kellett [Wed, 8 Aug 2018 21:10:02 +0000 (22:10 +0100)]
filter: kill last or we can't send the snote
Ed Kellett [Mon, 6 Aug 2018 16:48:15 +0000 (17:48 +0100)]
Add filter.c
Ed Kellett [Mon, 6 Aug 2018 11:57:52 +0000 (12:57 +0100)]
Depend on hyperscan
Aaron Jones [Sun, 6 Oct 2019 14:55:15 +0000 (14:55 +0000)]
Travis CI: Bump to Ubuntu Bionic 18.04 LTS
Also bump Linux compilers from (GCC 4.8, GCC 4.9, GCC 5, GCC 7,
GCC 8, Clang 3.9, Clang 4.0, Clang 5.0, Clang 6.0) to (GCC 7,
GCC 8, Clang 7, Clang 8). There's no need to test against every
ancient compiler under the sun. Furthermore, we no longer need
an apt sources list for Bionic.
[ci skip] (Tested already <https://travis-ci.org/charybdis-ircd/charybdis/builds/
594225622 >)
Aaron Jones [Sun, 15 Sep 2019 19:27:39 +0000 (19:27 +0000)]
Merge pull request #285 from edk0/ratelimits
Remove ratelimits on /stats and /motd when they don't have a server parameter
Ed Kellett [Fri, 2 Aug 2019 21:55:19 +0000 (22:55 +0100)]
m_motd: don't ratelimit with no server argument
Ed Kellett [Fri, 2 Aug 2019 20:56:10 +0000 (21:56 +0100)]
m_stats: don't ratelimit with no server argument
Simon Arlott [Sun, 15 Sep 2019 11:56:55 +0000 (12:56 +0100)]
Don't enable warnings on osx
Simon Arlott [Sun, 15 Sep 2019 11:33:56 +0000 (12:33 +0100)]
librb: Fix nossl
Simon Arlott [Sun, 15 Sep 2019 10:43:52 +0000 (11:43 +0100)]
librb: Fix nossl
Simon Arlott [Sun, 15 Sep 2019 10:41:41 +0000 (11:41 +0100)]
travis: Use newer versions of Clang
Simon Arlott [Sun, 15 Sep 2019 10:28:48 +0000 (11:28 +0100)]
Fix Clang 6 compiler warnings
Simon Arlott [Sun, 15 Sep 2019 10:14:38 +0000 (11:14 +0100)]
travis: Remove -Wno-unused-variable
Simon Arlott [Sun, 15 Sep 2019 10:13:54 +0000 (11:13 +0100)]
librb: Avoid unused variable warning
Simon Arlott [Sun, 15 Sep 2019 10:12:44 +0000 (11:12 +0100)]
librb: Specify -Wno-unused-parameter
Simon Arlott [Sun, 15 Sep 2019 10:04:28 +0000 (11:04 +0100)]
travis: Don't use -Werror on clang
Simon Arlott [Sun, 15 Sep 2019 10:00:50 +0000 (11:00 +0100)]
travis: Notify on IRC
Simon Arlott [Sun, 15 Sep 2019 09:57:53 +0000 (10:57 +0100)]
Fix GCC 8 compiler warnings
Simon Arlott [Sun, 15 Sep 2019 09:44:05 +0000 (10:44 +0100)]
travis: Ignore more unused warnings
Simon Arlott [Sun, 15 Sep 2019 09:41:33 +0000 (10:41 +0100)]
ircd: Use a larger buffer for ilog() buf2
Simon Arlott [Sun, 15 Sep 2019 09:26:35 +0000 (10:26 +0100)]
travis: Ignore unused-parameter warnings
Simon Arlott [Sun, 15 Sep 2019 09:25:25 +0000 (10:25 +0100)]
librb: Fix GCC 8 warning; 640 bytes should be enough