ngircd/src, branch rel-14-1

security: fix remotely triggerable crash in SSL/TLS code

2009-05-05T08:21:20+00:00

When a server is running with SSL/TLS support compiled in, it is trivial to crash the server by sending an MOTD request via another server in the network. - ONLY servers without ssl/tls support compiled in are not affected. Disabling SSL in the configuration (no ssl listening ports, etc) does NOT help. - servers that are running standalone (i.e., not connected to any other servers) are not affected, either. This affects all ngircd releases since ngircd 13 (earlier versions have no SSL/TLS support).

Fix server list announcement

2009-04-25T22:30:49+00:00

When ngircd announces the list of currently known servers to a new (connecting) server, it sent the introducer of the servers instead of the top server. Assuming this network: irc1.example.com |--irc2.example.com | `--irc3.example.com | `--irc4.example.com `--irc5.example.com When irc4 connects to irc3, irc3 tells irc4 that irc5 was connected to irc2. (irc2 had introduced irc5 to irc3; but thats not what ngircd should have sent to the new server). This also placed users on the wrong servers.

allow ping timeout quit messages to show the timeout value

2009-04-23T19:39:45+00:00

irc-server: do not remove hostnames from info text

2009-04-22T21:15:17+00:00

that code does not really make sense -- the info text is freely cofngiureable and des not follow a specific format. Also, that "+2" might have caused invalid memory accesses.

conn-zip: fix error handling

2009-04-21T19:00:43+00:00

callers of (Un)Zip_Buffer() assume that the function closes the connection on error. However, this was not always the case.

remove or translate old comments

2009-04-21T18:58:30+00:00

client.c: remove unecessary comments

2009-04-21T18:58:28+00:00

add const qualifier to pointers where possible

2009-04-21T18:58:23+00:00

Display IPv6 addresses as "[]" when accepting connections.

2009-04-10T11:22:03+00:00

With this patch ngIRCd displays IPv6 addresses as "[]:" when accepting new connections and later, if no successful DNS lookup could be made (or DNS is disabled altogether).

misspelling in ERR_NORECIPIENT reply

2009-03-25T19:44:40+00:00