Commit Graph
18247 Commits
Author SHA1 Message Date
zzz 66a270e7a2 Crypto: Use constant-time modPow() for ElG private key operations
Deprecate unused ElGamalSigEngine

reported by: bottomlineit.co.za
2026-05-01 11:34:28 -04:00
zzz 93be42925b Util: Update json-simple to 2.3.1
from https://github.com/cliftonlabs/json-simple.git tag json-simple.2.3.1 2018-02-05

Fixes:
- Jsoner.serialize array off-by-one deterministic crash on 9 primitive/Object array branches

reported by: bottomlineit.co.za
2026-04-30 20:17:28 -04:00
zzz dafde0c327 Util: Update minidns to 1.1.1
from https://github.com/MiniDNS/minidns tag 1.1.1 2024-10-24

Possible fixes (unverified):
- MiniDNS per-RR parsers throw NegativeArraySizeException on malformed header
- DnsName.parse recurses per label without depth bound StackOverflow DoS
- DnsName parser throws AIOOBE (not IOException) on truncated pointer
- ipv4From / ipv6From resolve via DNS instead of parsing literals
- Question constructor uses assert for null checks
- DnsMessage pre-allocates ArrayLists from 16-bit header counts
- OPT.parse uses dis.read() and disabled assert for bounds

reported by: bottomlineit.co.za
2026-04-30 19:06:49 -04:00
zzz 051dccf4b1 Util: Revert change causing failed decode of compressed IPv6 addresses
partial revert of aa77c9a4ab

reported by: bottomlineit.co.za
2026-04-30 18:21:33 -04:00
zzz 6c33651714 i2ptunnel, I2CP, SAM: Add delays on auth failure
to slow down repeat attempts
2026-04-27 12:13:18 -04:00
zzz 55f55208ad bump -3 i2p-2.12.0-3 2026-04-26 15:42:53 -04:00
zzz 818d0dfd5f i2psnark: Fix autostart of completed torrents when added to the directory
by not saving the torrent config file twice
(once via storageAllChecked() and once via storageCompleted() from Storage.checkCreateFiles())
the 1st call set running=true but the 2nd set running=false
2026-04-26 15:42:16 -04:00
zzz 66b6986ee0 Update: Randomize the order of news URLs when fetching
so if the "primary" is older than the "backup" things will still get updated eventually
2026-04-26 08:30:49 -04:00
zzz 7c99bb702e Console: Sanitize plugin name in ConfigClientsHandler
reported by: bottomlineit.co.za
2026-04-25 18:19:26 -04:00
zzz bb49736b33 Crypto: Disallow DSA-SHA1 signing k=q
reported by: bottomlineit.co.za
2026-04-25 17:47:20 -04:00
zzz 16a188996f Transport: Fix off-by-one check of SSU2 max fragment number
reported by: bottomlineit.co.za
2026-04-25 17:11:37 -04:00
zzz aa77c9a4ab Router: Don't use InetAddress.getByName() for blocklist IP conversion
to make really sure we don't use DNS, and it's slow anyway.

reported by: bottomlineit.co.za
2026-04-25 17:03:13 -04:00
zzz 20a10ae0ae Crypto: Change RFC 7748 DH error to a checked exception
so things are cleaned up properly
2026-04-25 15:22:21 -04:00
zzz e9d4b0c7e1 Crypto: Refactor Noise initialization to a separate class
with enums for efficiency and sanity
2026-04-25 14:26:52 -04:00
zzz b9bdce41a0 Add missing file for I2CP, bump -2 i2p-2.12.0-2 2026-04-25 10:57:31 -04:00
zzz 4c764b5165 bump -1 2026-04-25 10:54:02 -04:00
zzz 5e829e4ccb Transport: Add support for SSU2 PQ hybrid (proposal 169)
Gitea PR #533
2026-04-25 10:50:51 -04:00
zzz 4f892d6331 I2CP, SAM: Support lookup of ls2 options (proposal 167) 2026-04-25 10:43:58 -04:00
zzz 2f498e9a5d checklist update 2026-04-25 10:21:01 -04:00
zzz 1aba9220a3 I2CP: Add missing max length check on alternate readMessage() path
reported by: bottomlineit.co.za
2026-04-25 10:15:08 -04:00
zzz 94f62c9e9b NTCP2: Fail-fast if msg 1 padding length is too much
reported by: bottomlineit.co.za
2026-04-25 10:12:41 -04:00
zzz 3ad729aae9 Addressbook: Do not re-add hosts deleted in router address book
persist in file deleted.txt
and support regexes manually added in that file
change some Daemon methods to private

github #138
2026-04-25 10:07:58 -04:00
zzz 2a7f1caa21 SOCKS4a: Limit max string length
prevent local OOM

reported by: bottomlineit.co.za
2026-04-25 09:57:47 -04:00
zzz ba572bd1bd spotbugs fixes all over 2026-04-25 09:53:32 -04:00
eyedeekay 3a2c4ce50a Fix changelog version for 2.12.1-1~ubuntu2 and correct orig.tar.bz2 reference 2026-04-23 17:45:26 -04:00
eyedeekay 37fe0551ac Update changelog for version 2.12.1 release with corrections 2026-04-23 08:38:17 -04:00
eyedeekay 4de1d923d8 Update changelog for version 2.12.0 release 2026-04-22 12:18:19 -04:00
eyedeekay c2195844c4 Update ANT version to 1.10.17 in Dockerfile 2026-04-21 15:44:37 -04:00
eyedeekay 2800040dee Bump version to 2.12.0 and update related files i2p-2.12.0 2026-04-20 09:44:38 -04:00
zzz 386a90f6cd bump -14-rc for review i2p-2.11.0-14-rc 2026-04-17 14:26:38 -04:00
zzz 9d0d5eb604 Pull translations from Weblate
fix 'ant testscripts'
2026-04-17 14:24:24 -04:00
zzz c8be9527b3 bump -13-rc i2p-2.11.0-13-rc 2026-04-13 08:14:36 -04:00
zzz 05b8d4c359 tor blocklist update 2026-04-13 08:13:49 -04:00
zzz 5ba9ad218c Crypto: Use constant-time comparison in ElG decrypt and HMAC verification
check for zero output in X25519 DH as recommmended by RFC 7748

reported by: bottomlineit.co.za
2026-04-13 08:09:49 -04:00
zzz 624df2d275 Install: Disable add'l params to i2prouter script (GH #135) 2026-04-12 15:22:38 -04:00
zzz abdf08cc9b Build: Add spotbugs target 2026-04-09 13:41:58 -04:00
zzz 77fb8949e0 bump -12-rc i2p-2.11.0-12-rc 2026-04-08 11:39:39 -04:00
zzz 735c9592f8 poupdate-source 2026-04-08 11:34:22 -04:00
zzz 4265d6d60e i2ptunnel: Catch corrupt HTTP responses sooner
log tweaks
2026-04-04 06:47:02 -04:00
zzz 61a65346b1 Router: Increase conn limit for congestion flag 2026-04-04 06:13:33 -04:00
zzz 716dca2840 bump -11-rc i2p-2.11.0-11-rc 2026-04-02 08:33:45 -04:00
zzz f115298613 GeoIP 2026-04-01 2026-04-02 08:31:47 -04:00
zzz fffe879b58 checklist update 2026-04-02 08:23:05 -04:00
eyedeekay 95029f3652 Merge branch 'master' of github.com:i2p/i2p.i2p 2026-04-01 11:59:31 -04:00
idk 284e9daa70 Merge pull request #141 from Xyndra/link_fix
Fix link for building from source
2026-03-31 18:35:26 -04:00
idk cd91d5a4ce Merge pull request #142 from HeCorr/readme-fix
Updated moved and removed broken hyperlinks in the README
2026-03-31 18:35:11 -04:00
zzz 5bdc3cd062 more weblate script improvements 2026-03-31 18:03:36 -04:00
zzz 882b00434e Console: Move language dropdown data so translation report can get to it
Add dropdown data to translation report
2026-03-31 13:28:05 -04:00
Henrique Corrêa 7022b8d698 Add Android installation link to README
Found the new Google Play link. I think.
2026-03-27 20:57:42 -03:00
Henrique Corrêa 38d3c7a8f5 Update/Remove broken hyperlinks from README
Notes:
- No general installation docs page available so linked each individual system;
- "Android Installation" link at download page goes to 404 Google Play page so didn't include it in the list;
- Existing Documentation > API link (.../javadoc/) is gone and /docs/api/ page redirects away so removed it entirely.
2026-03-27 20:50:53 -03:00