* DHT Routing: Fixed dual-stack handling to clear stale IPv4/IPv6 associations when a node's address updates.
* Performance: Switched to memcmp for public key/hash comparisons (safe for non-secrets).
* Group Chat Reliability:
* Added logic to use friend connection IPs as a fallback if DHT discovery is slow, with a fix to prevent overwriting existing valid IPs.
* Increased handshake connection limits and fixed full-group sync behavior.
* Enforced list sorting and fixed timestamps to ensure consistent moderation state hashes across all peers.
The `rtp_receive_packet` function (via `fill_data_into_slot`) relied on
the `data_length_full` field in the RTP header to allocate the frame
buffer, but failed to verify that the actual payload length of the
incoming packet fit within this allocated size. A malicious peer could
send a packet with a small `data_length_full` but a large payload,
causing `memcpy` to write past the end of the buffer.
This commit adds a bounds check to ensure that the packet offset plus
the payload length does not exceed the total frame length. Tested via
unit tests.
- Refactor MSISession to use a mandatory MSICallbacks struct in msi_new.
- Remove individual MSI callback setters to enforce full initialization.
- Fix doubly linked list corruption in new_call when reusing friend numbers.
- Fix missing capability updates and callback triggers during friend recall.
- Remove legacy toxav_hacks.h and clean up build files.
- Remove invalid vpx_img_free call in vc_iterate.
- Make vc_reconfigure_encoder atomic and add resolution limits.
- Support 32-bit RTPMessage lengths to correctly handle large frames.
- Ensure len is correctly set for assembled video frames.
- Add security checks for incoming frame sizes and resolutions.
- Significantly expand video and rtp unit tests covering security scenarios.
- Clean up VCSession structure and improve internal API consistency.
- Use #define for security constants in video module.
- Fix heap-buffer overflow in `ac_iterate` (PLC) by validating sampling rates and channel counts from untrusted RTP packets.
- Fix out-of-bounds read by adding explicit packet length validation (minimum 5 bytes).
- Fix jitter buffer reset bug where late packets caused a full buffer clear due to unsigned wrap-around.
- Fix jitter buffer PLC logic to correctly handle sequence number wrap-around at 16-bit boundaries.
- Refactor `ac_iterate` to process all currently ready packets in a single call, improving throughput.
- Optimize `ac_iterate` by moving the large scratch buffer allocation outside the packet processing loop.
- Add unit tests covering jitter buffer edge cases, wrap-around scenarios, and malicious packet handling.
- Refactor `ACSession` to be opaque and provide accessor for frame duration.
- Fix rate limiting logic to be wrap-around safe for timestamps.
- Fix potential division-by-zero/sum-overflow in percentage calculation by using double precision.
- Fix NULL callback dereference in send_update.
- Add comprehensive unit tests covering edge cases and bug scenarios.
- Refactor BWController to be more testable by injecting a packet sending callback.
The tox_log_level.h header file was added as a public API header in
version 0.2.21, but was not included in the libtoxcore_la_include_HEADERS
variable in toxcore/Makefile.inc. This caused the header to not be
installed when building with autotools, leading to compilation errors
for applications that include tox_options.h (which depends on
tox_log_level.h, like qTox).
This patch adds tox_log_level.h to the list of installed headers,
matching the behavior of the CMake build system.
Commit: c834472637
Fixes: compilation error "tox_log_level.h: No such file or directory"
Instead of transitively loading them from dependencies, we should be
explicit about what each object needs. The downside of this is that it's
not clear whether the object and its dependency use the same common
dependency. The upside is that we don't expose those getters of internal
dependencies.
Technically all this does is choose a quality based on frame
duration, which we always set to 1, and as such is always realtime.
(In same timebase as pts, which we use as a frame counter...)
Also no deadline for decoder. (documentation tells us its ignored)
This release brings 2 great featues. First, the abillty to disable DNS lookups, which has been a long requested security feature, which we plan to default to in an upcoming version.
Second, there is an network profiler, which tallies up sent and received network packets.
Beside these features we also have fixes like a 75% memory usage reduction for NGCs and connecting to NGC with a password if we are already joined, which might be necessary if a password was set or changed while you where away.
Furthermore, we now have better localhost discovery, which means that nodes on the same system find each other.
---
If you have not yet upgraded to the previous release (0.2.20), you absolutely should, as it fixes a security issue. All releases before 0.2.20 used VBR opus encoding, which is susceptible to transcription attacks. ( see https://github.com/TokTok/c-toxcore/pull/2757 )
This allows us to have a single netprof object for all TCP client
connections, which makes it easier to query and keep track of
TCP network data for groupchats. Previously we were not properly
querying groupchat TCP network data via the netprof API.
We already put them into an xcframework. There's no strong reason to
keep them as separate assets as well.
Also removed the Makefile for single-file uploads, because it
individually appears in the release assets. The .c files are
intentionally separate asset uploads, but the Makefile is always the
same so can be fetched directly from the repo if needed.
iphydf