BruebachL b37c8b828f [Utility] Budget scrypt's XY array in the derivation memory limit (#7712) ... deriveKey passes maxmem = 128nr + 128rp + 4096 to EVP_PBE_scrypt, but scrypt also allocates XY at 256r bytes. costParamsAreSane accepts r up to 32, so any server asking for r >= 17 made derivation fail and the client report a login abort it could never recover from. Cover the XY array and add a regression test at the accepted-range boundary. Co-authored-by: Lukas Brübach <Bruebach.Lukas@bdosecurity.de>		2026-11-02 07:29:15 +01:00
..
card_ref.h	[DeckList] Move metadata into struct (#6380)	2025-11-30 13:09:09 +01:00
clamped_arithmetic.h	Unify counter clamp arithmetic into shared addClamped() helper (#7009)	2026-06-28 16:10:57 -07:00
color.h	[Game][Counters] Split counters into AbstractCounter (graphics) and CounterState (logic) (#6917)	2026-05-21 20:16:28 +02:00
counter_limits.h	Split trice_limits.h into dedicated headers (#7025)	2026-06-29 14:37:52 -07:00
cryptoutil.cpp	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords (#7193)	2026-10-16 22:52:26 +02:00
cryptoutil.h	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords (#7193)	2026-10-16 22:52:26 +02:00
days_years_between.h	[Room][UserList] Introduce style delegate (#6981)	2026-06-26 20:52:24 -04:00
debouncer.h	[QtUtils] Add Debouncer helper (#7623)	2026-10-24 22:43:10 +02:00
dice_limits.h	Split trice_limits.h into dedicated headers (#7025)	2026-06-29 14:37:52 -07:00
expression.cpp	[Tooling] Apply include-what-you-use across the tree (#7396)	2026-10-08 11:13:50 +02:00
expression.h	Turn Card, Deck_List, Protocol, RNG, Network (Client, Server), Settings and Utility into libraries and remove cockatrice_common. (#6212)	2025-10-09 07:36:12 +02:00
installer_close_protocol.h	[Installer] Graceful close and a way out of a stuck update (#7687)	2026-10-31 15:32:59 +01:00
levenshtein.cpp	[Search] Stop allocating per card in card-name completion (#7604)	2026-10-23 11:23:04 +02:00
levenshtein.h	Standardize Doxygen documentation (#6885)	2026-05-21 22:58:07 +02:00
local_server_name.h	[Client] Improve card database update visibility (#7458)	2026-10-09 11:07:48 +02:00
macros.h	Turn Card, Deck_List, Protocol, RNG, Network (Client, Server), Settings and Utility into libraries and remove cockatrice_common. (#6212)	2025-10-09 07:36:12 +02:00
passwordhasher.cpp	[Utility] Budget scrypt's XY array in the derivation memory limit (#7712)	2026-11-02 07:29:15 +01:00
passwordhasher.h	[Security] Add challenge-response auth with scrypt verifiers and stop storing plaintext passwords (#7193)	2026-10-16 22:52:26 +02:00
peglib.h	Update peglib to v1.16.0 (#7134)	2026-08-17 22:52:30 +02:00
playmat_params.h	[Game] Playmats (#7101)	2026-08-21 10:40:49 +02:00
qt_utils.h	[QtUtils] Add window fade, path opening, bold font and confirmation helpers (#7621)	2026-10-24 21:38:54 +02:00
report_categories.cpp	[Tooling] Apply include-what-you-use across the tree (#7396)	2026-10-08 11:13:50 +02:00
report_categories.h	[Server/Client] Unify report categories (#7345)	2026-09-24 18:37:54 +02:00
server_rate_limiter.cpp	[Tooling] Apply include-what-you-use across the tree (#7396)	2026-10-08 11:13:50 +02:00
server_rate_limiter.h	[Tooling] Apply include-what-you-use across the tree (#7396)	2026-10-08 11:13:50 +02:00
string_limits.h	[Server/Client/Protocol] Reporting users + moderation queue functionality (#7091)	2026-08-21 15:00:13 +02:00
translation_loader.cpp	[Translation] Name languages without reading the translation files (#7662)	2026-10-26 02:39:26 +01:00
translation_loader.h	[Translation] Name languages without reading the translation files (#7662)	2026-10-26 02:39:26 +01:00
user_data_backup.cpp	[Installer][Client] Back up user data before old uninstallers can delete it (#7503)	2026-10-16 22:05:42 +02:00
user_data_backup.h	[Installer][Client] Back up user data before old uninstallers can delete it (#7503)	2026-10-16 22:05:42 +02:00
warning_categories.cpp	[Tooling] Apply include-what-you-use across the tree (#7396)	2026-10-08 11:13:50 +02:00
warning_categories.h	[Server/Client/Protocol] Reporting users + moderation queue functionality (#7091)	2026-08-21 15:00:13 +02:00
zone_names.h	Refactor zone names (#6686)	2026-03-12 00:34:05 +01:00