Commit Graph
1656 Commits
Author SHA1 Message Date
such-gitea 8efe706101 ci(testnet): qualify native Wownero research builds 2026-10-07 10:52:05 -04:00
jeffro256andj-berman 6ab4392fbb blockchain: handle changing LTM window size 2026-09-23 10:09:07 -07:00
j-berman 9cf572b715 Bump GUIX RUST_DEPS_HASH 2026-09-18 11:23:57 -07:00
+3 a9145f9d38 FCMP++/Carrot mega commit [9/14/26]
Co-authored-by: jeffro256 <jeffro256@tutanota.com>
Co-authored-by: Luke Parker <lukeparker5132@gmail.com>
Co-authored-by: Lee *!* Clagett <code@leeclagett.com>
Co-authored-by: SyntheticBird45 <someoneelse.is_on.github.rio7x@simplelogin.com>
Co-authored-by: jeetrex17 <jeetrex@tutamail.com>
Co-authored-by: UkoeHB <ukoehb@users.noreply.github.com>
Co-authored-by: MrCyjaneK
Co-authored-by: tobtoht
Co-authored-by: selsta
Co-authored-by: Thomas <thomas.giudici@proton.me>
Co-authored-by: navidR
Co-authored-by: Boog900 <boog900@tutanota.com>
2026-09-17 18:33:24 -07:00
selsta 90753611a7 epee: prevent log injection from malformed HTTP headers 2026-09-09 22:23:06 +02:00
tobtoht b30a99386d Merge pull request #11207
1f58e91 epee, common: pass unsigned char to <cctype> functions (pucedoteth)

ACKs: jpk68, Ap4sh, selsta
2026-09-09 20:08:18 +00:00
tobtoht 3db0f93a36 Merge pull request #11191
960dc81 fuzz: add network address tests (jpk68)

ACKs: selsta, tobtoht
2026-09-09 20:02:50 +00:00
tobtoht 6b37a7e75d Merge pull request #11054
2b7ed47 cmake: add more compiler warnings (jpk68)

ACKs: SNeedlewoods*, selsta, thomasbuilds
2026-09-09 19:53:01 +00:00
jeffro256 c7a2d4f66a crypto: reduce crypto.h header weight 2026-09-07 21:32:29 -05:00
jpk68 960dc81d76 fuzz: add network address tests 2026-09-02 14:55:24 -04:00
tobtoht e02caca61a Merge pull request #11195
384fc9b tests: add Bulletproof+ fuzz test (Samy)

ACKs: selsta, jpk68
2026-09-01 19:06:00 +00:00
tobtoht f7a927ad4a Merge pull request #11197
cd8beb7 depends: protobuf: don't use android system logging (tobtoht)

ACKs: jpk68, selsta
2026-08-31 18:39:57 +00:00
tobtoht a95de010bd Merge pull request #11186
4fdcd5f depends: openssl: update to 3.5.8 (tobtoht)

ACKs: jpk68, selsta
2026-08-31 18:38:01 +00:00
pucedoteth 1f58e91d60 epee, common: pass unsigned char to <cctype> functions
The <cctype> functions require their argument to be representable as
unsigned char or to equal EOF. char is signed on the platforms Monero
targets, so every byte >= 0x80 reaches them negative, which is undefined
behaviour.

All six call sites take bytes that come from outside the process:

  hex_to_dec_2bytes()     percent-escapes in a payment URI
  http_client.h           the status line of an HTTP response
  updates.cpp             the hash field of a DNS update record

glibc and the macOS libc happen to tolerate -128..-1 because their tables
carry padding below zero, so this is quiet in practice on those, but it is
still out of contract and other libcs index without that cushion.

Cast to unsigned char at each call. The conversion is behaviour-preserving
for the ASCII these actually test: for a byte such as 0xC3, toupper()
returns it unchanged in the C locale, it narrows back to char, memchr()
misses it in the hex table, and hex_to_dec_2bytes() falls through to the
existing literal "%XY" output exactly as before.

epee::misc_utils::parse::isdigit/isalpha/isspace are separate char-taking
helpers and are already well defined, so they are untouched, as is
is_base64(), which already takes unsigned char.
2026-08-29 04:38:57 +02:00
tobtoht 52a2323743 Merge pull request #11167
f7d27f0 wallet: encode equals signs in URIs (Samy)

ACKs: jpk68, selsta
2026-08-27 17:59:29 +00:00
tobtoht cd8beb75b9 depends: protobuf: don't use android system logging 2026-08-26 21:39:33 +02:00
tobtoht 454075bc61 Merge pull request #11165
e201bc4 depends: boost: set triple explicitely (tobtoht)

ACKs: selsta, jpk68
2026-08-26 18:10:10 +00:00
tobtoht bfd47e7e8c Merge pull request #11162
f5f7b51 depends: support pure clang builds (tobtoht)

ACKs: jpk68, selsta
2026-08-26 18:07:18 +00:00
Samy 384fc9b87f tests: add Bulletproof+ fuzz test 2026-08-26 15:50:48 +02:00
tobtoht d07a6b1572 Merge pull request #10748
db0f7c5 combine utf-16 surrogate pairs in json string parser (alhudz)

ACKs: selsta, jpk68
2026-08-26 07:35:01 +00:00
tobtoht 833c91e5db Merge pull request #11134
5066fd0 wallet2: abort in-flight daemon request on shutdown (woodser)

ACKs: amin404ala*, thomasbuilds, selsta
2026-08-26 07:33:16 +00:00
tobtoht 4fdcd5fe25 depends: openssl: update to 3.5.8 2026-08-25 18:49:18 +02:00
tobtoht 95c12d72e9 Merge pull request #11148
7a3bd6c epee: prevent JSON parser log injection (selsta)

ACKs: tobtoht*, jpk68
2026-08-25 16:38:06 +00:00
tobtoht 95eee4fdeb Merge pull request #11108
46cb198 depends: consistently use host for triples (tobtoht)

ACKs: selsta, jpk68
2026-08-25 16:32:32 +00:00
woodser 5066fd05f1 wallet2: abort in-flight daemon request on shutdown 2026-08-25 07:11:53 -04:00
tobtoht 46cb19853f depends: consistently use host for triples 2026-08-25 08:40:44 +02:00
tobtoht a6b67c94cd Merge pull request #11137
6f82bac Fix two separate data races in async levin commands (Lee Clagett)

ACKs: thomasbuilds, jpk68, selsta
2026-08-23 20:16:47 +00:00
tobtoht bc933f920f Merge pull request #8540
7a8642e Update levin async callbacks for C++14 (Lee *!* Clagett)

ACKs: jpk68, jeffro256, selsta
2026-08-23 07:42:48 +00:00
tobtoht 061c061673 Merge pull request #11127
c2aaa40 epee: parse HTTP methods case-sensitively (Samy)

ACKs: redsh4de, jpk68, SyntheticBird45
2026-08-23 07:41:55 +00:00
tobtoht e455c708e0 Merge pull request #10521
46c857e epee: fail digest auth cleanly when MD5 is unavailable (selsta)

ACKs: vtnerd, jpk68
2026-08-23 07:40:37 +00:00
jpk68 2b7ed47728 cmake: add more compiler warnings 2026-08-21 21:44:18 -04:00
Lee *!* Clagett 7a8642eb1a Update levin async callbacks for C++14 2026-08-21 17:42:09 -04:00
Samy f7d27f05dd wallet: encode equals signs in URIs
The URI parser treats '=' as the parameter delimiter, so leaving it raw in text fields makes make_uri output fail to parse
2026-08-21 13:50:55 +02:00
tobtoht e201bc4244 depends: boost: set triple explicitely 2026-08-20 17:13:02 +02:00
tobtoht f5f7b5110b depends: support pure clang builds 2026-08-20 11:40:19 +02:00
selsta 7a3bd6c68d epee: prevent JSON parser log injection 2026-08-19 22:27:22 +02:00
tobtoht 31268f0eb2 Merge pull request #11103
6d3abd3 epee: validate Levin response command before buffering (selsta)

ACKs: jpk68, vtnerd
2026-08-19 11:24:19 +00:00
tobtoht a304f435af Merge pull request #11104
aa94914 epee: fix hex separator handling (questfever)

ACKs: selsta, jpk68
2026-08-19 11:23:43 +00:00
Lee Clagett 6f82bacbb9 Fix two separate data races in async levin commands 2026-08-17 20:56:25 -04:00
tobtoht cd701600df Merge pull request #11082
7e0c68b p2p: don't reset timeout timer for handshakes (j-berman)

ACKs: jpk68, selsta, vtnerd
2026-08-17 17:25:42 +00:00
tobtoht f18ea5a8c7 Merge pull request #11066
0bf3e67 epee: replace some fragile code (jpk68)

ACKs: selsta, SNeedlewoods
2026-08-17 09:19:06 +00:00
Samy c2aaa4057d epee: parse HTTP methods case-sensitively 2026-08-16 18:44:03 +02:00
tobtoht 91de740d63 Merge pull request #11081
52d19ac epee: ensure is_file_exist doesn't throw (jpk68)

ACKs: selsta, SNeedlewoods
2026-08-16 15:18:21 +00:00
questfever aa9491451b epee: fix hex separator handling 2026-08-13 21:00:20 +08:00
tobtoht eee137f380 Merge pull request #10359
32c4952 FCMP++: Rust FFI + crypto conversion selene_scalar_from_bytes (j-berman)

ACKs: jeffro256, UkoeHB, redsh4de, jpk68
2026-08-12 14:46:34 +00:00
tobtoht 1d909d09f4 depends: set CMAKE_{LANG}_COMPILER_TARGET 2026-08-12 12:00:23 +02:00
32c4952fab FCMP++: Rust FFI + crypto conversion selene_scalar_from_bytes
Co-authored-by: Luke Parker <lukeparker5132@gmail.com>
Co-authored-by: jeffro256 <jeffro256@tutanota.com>
Co-authored-by: tobtoht <tob@featherwallet.org>
Co-authored-by: jpk68 <jpk68@tutanota.com>
Co-authored-by: MrCyjaneK <cyjan@mrcyjanek.net>
2026-08-11 15:53:02 -07:00
tobtoht fcd62c20d7 Merge pull request #11057
fccaccb src: fix issues found through static analysis (jpk68)

ACKs: jeffro256, SNeedlewoods
2026-08-11 21:21:49 +00:00
tobtoht cac5eea3b9 Merge pull request #11037
e8718e6 p2p: use a bool for send() (j-berman)

ACKs: vtnerd*, jeffro256*, selsta, jpk68
2026-08-11 21:19:25 +00:00
j-berman 7e0c68b422 p2p: don't reset timeout timer for handshakes
The handshake timeout should just be an absolute timeout, we don't
care about partial messages received during the handshake.
2026-08-10 20:06:54 -07:00