mirror of
https://github.com/Cockatrice/Cockatrice.git
synced 2026-11-05 01:23:24 -08:00
d0fc27e3a8
Some checks are pending
CodeQL / Analyze (cpp) (push) Waiting to run
CodeQL / Analyze (actions) (push) Waiting to run
Build Desktop / Configure (push) Waiting to run
Build Desktop / Debian 13 (push) Blocked by required conditions
Build Desktop / Debian 12 (push) Blocked by required conditions
Build Desktop / Fedora 44 (push) Blocked by required conditions
Build Desktop / Fedora 43 (push) Blocked by required conditions
Build Desktop / Servatrice_Debian 12 (push) Blocked by required conditions
Build Desktop / Ubuntu 26.04 (push) Blocked by required conditions
Build Desktop / Ubuntu 24.04 (push) Blocked by required conditions
Build Desktop / Arch (push) Blocked by required conditions
Build Desktop / macOS 13 Intel (push) Blocked by required conditions
Build Desktop / macOS 14 (push) Blocked by required conditions
Build Desktop / macOS 15 (push) Blocked by required conditions
Build Desktop / macOS 26 Debug (push) Blocked by required conditions
Build Desktop / Windows 10 (push) Blocked by required conditions
Build Docker / Servatrice (arm) (push) Waiting to run
Build Docker / Servatrice (x86) (push) Waiting to run
Build Docker / Publish multi-platform Servatrice image (push) Blocked by required conditions
- TCP client connections: reject messages whose declared length is negative or exceeds a 1.5MB cap immediately instead of buffering indefinitely, preventing unbounded memory growth and the previously stuck state caused by negative lengths overflowing the int header. - ISL connections: apply the same length validation with a 4MB cap, disconnecting the peer on an implausible length. - Websockets: only trust the forwarded client-address header (e.g. X-Forwarded-For) when the websocket connection originates from an address in security/trusted_sources. Previously any client could spoof its address to bypass bans, user limits and rate limiting. Took 3 minutes Co-authored-by: Lukas Brübach <Bruebach.Lukas@bdosecurity.de> |
||
|---|---|---|
| .. | ||
| smtp | ||
| deck_tag_serialization.h | ||
| email_parser.cpp | ||
| email_parser.h | ||
| event_loop_watchdog.cpp | ||
| event_loop_watchdog.h | ||
| isl_interface.cpp | ||
| isl_interface.h | ||
| main.cpp | ||
| main.h | ||
| metrics_registry.cpp | ||
| metrics_registry.h | ||
| servatrice.cpp | ||
| servatrice.h | ||
| servatrice_connection_pool.cpp | ||
| servatrice_connection_pool.h | ||
| servatrice_database_interface.cpp | ||
| servatrice_database_interface.h | ||
| server_logger.cpp | ||
| server_logger.h | ||
| serversocketinterface.cpp | ||
| serversocketinterface.h | ||
| settingscache.cpp | ||
| settingscache.h | ||
| signalhandler.cpp | ||
| signalhandler.h | ||
| smtpclient.cpp | ||
| smtpclient.h | ||