Commit Graph
3237 Commits
Author SHA1 Message Date
Anon2026 ca85a076e5 fix typos 2026-10-15 22:41:31 +03:00
orignal 5cfd8d67cc update resseds list 2026-10-14 14:08:22 -04:00
orignal 9cd8036b3b remove ShowTorrentPage from webconsole 2026-10-13 21:45:47 -04:00
orignal 2957952479 allow 0 value for max speed 2026-10-13 19:21:38 -04:00
orignal 3113ca23ec clamp inbound and outbound speed param 2026-10-13 18:52:24 -04:00
orignal f946ed6a12 fixed possible overflow 2026-10-13 11:01:53 -04:00
PobreGato 1e89ec5759 fix overflow in tunnel build bandwidth options check 2026-10-12 21:28:29 -04:00
orignal 21a7726916 don't handle LeaseSet1 coming from ECIESx25519 session 2026-10-11 20:08:00 -04:00
orignal 790477ed85 print correct max LeaseSet request timeout 2026-10-11 11:47:46 -04:00
orignal 6aa07fff5f don't drop datagram right away if remote LeaseSet is being requested 2026-10-10 18:45:57 -04:00
orignal 822e4ed718 case-insensistive check for gzip and x-i2p-gzip 2026-10-09 19:35:56 -04:00
orignal dc3fe66596 print warning message if RouterInfo was not updated 2026-10-09 08:31:40 -04:00
orignal ac2888d2d6 x-i2p-gzip shoudln't trigger gzipped if not requested explicitly 2026-10-09 08:11:05 -04:00
PobreGato f438566f53 check BIGNUM for null in bn2buf 2026-10-06 22:38:56 -04:00
orignal 8d93f430c8 Merge pull request #2588 from pobregat0/ratchet-payload-block-header
Check the whole block header fits before reading block size in ratchets payload
2026-10-06 20:29:38 -04:00
PobreGato cc77898b95 check the whole block header fits before reading block size in ratchets payload 2026-10-06 19:02:26 -04:00
PobreGato cf7f15af0c check the whole block header fits before reading block size in SSU2 payload 2026-10-06 19:02:18 -04:00
orignal c49af510fe use std::from_chars to parse port 2026-10-05 21:20:22 -04:00
orignal bed16f597e print correct publish retry interval 2026-10-04 18:55:32 -04:00
orignal 288d9939e8 removed wpath calls 2026-10-04 18:44:11 -04:00
orignal 0410c57dc4 use std::chrono::clock_cast when available 2026-10-04 17:55:27 -04:00
orignal e27f705eeb reserve space for very last ack range 2026-10-04 08:52:57 -04:00
orignal 39b2f82c24 retry publishing LeaseSet if no floodfills or tunnels 2026-10-03 22:08:44 -04:00
orignal 793431aed3 use std::stoi for conversion from hex string 2026-10-03 11:04:54 -04:00
orignal 2de93be1a3 check is host end with .i2p using ends_with 2026-10-01 22:21:16 -04:00
PobreGato 2c1d3612e0 check datetime block size in NTCP2 data frame 2026-10-01 21:17:20 -04:00
orignal 1078c347f1 fixed typo in log message 2026-09-27 18:13:37 -04:00
orignal c9cc1c80be check if received timestamp is too high 2026-09-27 09:52:09 -04:00
acetone 5b3e4db7f1 create key files readable by owner only 2026-09-23 10:48:32 -04:00
orignal 1e98572c32 use std::span instead naked poinnted for transient private key 2026-09-22 08:26:13 -04:00
acetone 4d9cba2df5 b33 offline keys for an encrypted LeaseSet 2026-09-21 14:33:24 -04:00
acetone 55fa7cd72d don't verify Layer 2 of an encrypted LeaseSet with the outer transient 2026-09-21 13:19:02 -04:00
orignal b8a8bcc7e0 constexpr Base64EncodingBufferSize for C++23 2026-09-20 10:03:32 -04:00
orignal 1a1884c4eb changed minimal compressed size to 20 bytes 2026-09-19 22:28:51 -04:00
orignal f70e74f316 don't try to copy private key if not set 2026-09-19 21:43:23 -04:00
orignal 328860f0bb Merge pull request #2565 from pobregat0/pool-cleanup-order
detach memory pool list before freeing it
2026-09-18 22:27:03 -04:00
PobreGato 68a4f90fa9 call SendClose and Terminate through the service in Close 2026-09-18 22:17:59 -04:00
PobreGato 1c408f6086 detach memory pool list before freeing it 2026-09-18 19:57:20 -04:00
orignal 4e2a13bb8e drop public keys if FromBuffer failed 2026-09-17 21:14:41 -04:00
orignal a6ebaeda0c don't crash if unknown signing key type for new private keys 2026-09-17 18:38:12 -04:00
orignal c786d3ab84 updated reseed 2026-09-17 17:46:43 -04:00
orignal 43a8f0981a exlclude duplicated trackers with same host and b32 address 2026-09-16 17:26:00 -04:00
orignal 87340e65db Merge pull request #2557 from jpk68/add-checks
fix: missing checks and limits
2026-09-16 09:00:11 -04:00
jpk68 5e93f74e19 fix: missing checks and limits 2026-09-16 08:47:15 -04:00
orignal daf3b5c58d check encryption key len for known key types 2026-09-16 08:31:21 -04:00
orignal 8769d0615a Revert "LeaseSet2: check declared key length before creating an encryptor" 2026-09-16 07:27:26 -04:00
PobreGatoandClaude Opus 5 466e865e91 LeaseSet2: check declared key length before creating an encryptor
A key section in a standard LeaseSet2 carries both a key type and a key
length. The length is checked against the buffer, but the encryptor reads
a length fixed by the type instead: 256 bytes for ElGamal, 64 for ECIES
P256, 32 for X25519. A section that declares ElGamal with a length of zero
passes the check and then makes CreateEncryptor read 256 bytes past the end
of the message.

Key sections are parsed before the signature is verified, so no key material
is needed to trigger it.

GetCryptoPublicKeyLen returned 32 for ECIES P256, while the key is x and y,
32 bytes each; without fixing that too, the new check would still let a 32
byte P256 section through.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Awv7FvZTpGFsKFNeNyJaTE
2026-09-14 21:43:53 -04:00
acetone e86eac8ee7 require a full range pair in SSU2 ack block 2026-09-14 14:45:39 -04:00
acetone a5d4896a5c check outer plaintext length in encrypted LeaseSet2 2026-09-14 14:45:39 -04:00
acetone 82047ccbc4 check clove length before reading delivery status and tunnel test 2026-09-14 14:45:13 -04:00