Repository navigation

All pull requests

bouncer: read v8 session records as their build wrote them instead of dropping them at boot
#146rdrake opened Oct 29, 2026
history: a '|' in the nick no longer shifts the stored record's fields
#145rdrake opened Oct 29, 2026
channel: stack bans left in the ban list, and a NULL write on a deop with an oplevel
#144rdrake opened Oct 29, 2026
P10: six one-line crashes from a linked server (wrong source type and missing arguments)
#143rdrake opened Oct 29, 2026
numnicks: decode a peer's numnicks and IP fields only within their bounds
#142rdrake opened Oct 29, 2026
websocket: reassembled messages fit their buffer and meet the recv caps
#141rdrake opened Oct 29, 2026
websocket: the Sec-WebSocket-Protocol scan always ends (pre-auth hang)
#140rdrake opened Oct 29, 2026
s_user: a refused bouncer resume no longer registers under the held nick
#139rdrake opened Oct 29, 2026
bouncer: attach and revive keep the session consistent (UAF on BOUNCER RESUME, lost hold timers)
#138rdrake opened Oct 29, 2026
s_conf: a rehash during a server handshake no longer frees its Connect block under it
#137rdrake opened Oct 29, 2026
parse, crule, s_auth: four inherited input-handling bugs (server-triggerable crash on "000")
#136rdrake opened Oct 29, 2026
batch: a multiline PRIVMSG/NOTICE with no text no longer crashes the server
#135rdrake opened Oct 29, 2026
geoip: an unknown continent code no longer reads past the name table
#134rdrake opened Oct 29, 2026
tests: the cmocka suite runs clean under ASan/UBSan
#133rdrake opened Oct 29, 2026
m_cap: give the qsort/bsearch comparators the type they are called with
#132rdrake opened Oct 29, 2026
send: own JOIN/PART/NICK echoes carry the event's msgid; fix always-true PRIVMSG/NOTICE test
#131rdrake opened Oct 29, 2026
hlc: carry logical overflow into physical time instead of wrapping (duplicate msgids)
#130rdrake opened Oct 29, 2026
Websocket Reconnect Refund or *IPcheck: give a SASL login its connection attempt back (capped per account), and let refusals leave no trace*
#129PseudoSean opened Oct 27, 2026
account: carry the account id through this server unchanged
#126MrLenin opened Oct 21, 2026Contributor
1
evilnet/channel-relocate: consent-based channel relocation (stacked on #94)
#96MrLenin opened Aug 3, 2026Contributor
docker: marker-based base.conf generation + robust sed escaping
#95MrLenin opened Aug 1, 2026Contributor
draft/channel-rename: services-arbitrated registered-channel rename
#94MrLenin opened Jul 31, 2026Contributor

Navigation Menu

Repository navigation

All pull requests

bouncer: read v8 session records as their build wrote them instead of dropping them at boot

history: a '|' in the nick no longer shifts the stored record's fields

channel: stack bans left in the ban list, and a NULL write on a deop with an oplevel

P10: six one-line crashes from a linked server (wrong source type and missing arguments)

numnicks: decode a peer's numnicks and IP fields only within their bounds

websocket: reassembled messages fit their buffer and meet the recv caps

websocket: the Sec-WebSocket-Protocol scan always ends (pre-auth hang)

s_user: a refused bouncer resume no longer registers under the held nick

bouncer: attach and revive keep the session consistent (UAF on BOUNCER RESUME, lost hold timers)

s_conf: a rehash during a server handshake no longer frees its Connect block under it

parse, crule, s_auth: four inherited input-handling bugs (server-triggerable crash on "000")

batch: a multiline PRIVMSG/NOTICE with no text no longer crashes the server

geoip: an unknown continent code no longer reads past the name table

tests: the cmocka suite runs clean under ASan/UBSan

m_cap: give the qsort/bsearch comparators the type they are called with

send: own JOIN/PART/NICK echoes carry the event's msgid; fix always-true PRIVMSG/NOTICE test

hlc: carry logical overflow into physical time instead of wrapping (duplicate msgids)

Websocket Reconnect Refund or IPcheck: give a SASL login its connection attempt back (capped per account), and let refusals leave no trace

account: carry the account id through this server unchanged

evilnet/channel-relocate: consent-based channel relocation (stacked on #94)

docker: marker-based base.conf generation + robust sed escaping

draft/channel-rename: services-arbitrated registered-channel rename

Pull requests