July 2026 - ngIRCd GIT Updates

[ngircd/ngircd]
by Alexander Barton 12 Jul '26

12 Jul '26

Branch: refs/tags/rel-28 Home: https://github.com/ngircd/ngircd To unsubscribe from these emails, change your notification settings at https://github.com/ngircd/ngircd/settings/notifications

1 0

[ngircd/ngircd] 6ae13b: ngIRCd Release 28
by Alexander Barton 12 Jul '26

12 Jul '26

Branch: refs/heads/master Home: https://github.com/ngircd/ngircd Commit: 6ae13bf89e934d167f6ead8bb9ee39f57a0935c0 https://github.com/ngircd/ngircd/commit/6ae13bf89e934d167f6ead8bb9ee39f57a0… Author: Alexander Barton <alex(a)barton.de> Date: 2026-07-12 (Sun, 12 Jul 2026) Changed paths: M AUTHORS.md M ChangeLog M NEWS M contrib/Debian/changelog M contrib/de.barton.ngircd.metainfo.xml M contrib/ngircd.spec Log Message: ----------- ngIRCd Release 28 To unsubscribe from these emails, change your notification settings at https://github.com/ngircd/ngircd/settings/notifications

1 0

[ngircd/ngircd] 425fb6: Truncate long KICK reasons and topics (#339)
by Val Lorentz 12 Jul '26

12 Jul '26

Branch: refs/heads/master Home: https://github.com/ngircd/ngircd Commit: 425fb6d5acbaf3b0383f4164e3a07c61163592a6 https://github.com/ngircd/ngircd/commit/425fb6d5acbaf3b0383f4164e3a07c61163… Author: Val Lorentz <progval+git(a)progval.net> Date: 2026-07-12 (Sun, 12 Jul 2026) Changed paths: M src/ngircd/defines.h M src/ngircd/irc-channel.c M src/ngircd/irc-info.c M src/ngircd/irc-op.c Log Message: ----------- Truncate long KICK reasons and topics (#339) KICKLEN is advertised in ISUPPORT but was not enforced. TOPICLEN is advertised, but was so high it was guaranteed not to be fully sendable to other clients (23 bytes does not cover ':server.example.org TOPIC #chan :') To unsubscribe from these emails, change your notification settings at https://github.com/ngircd/ngircd/settings/notifications

1 0

[ngircd/ngircd] 5b23b6: Disconnect clients that send data without a comman...
by James 12 Jul '26

12 Jul '26

Branch: refs/heads/master Home: https://github.com/ngircd/ngircd Commit: 5b23b6ef39fac48e2a0327d9cdc1bea015e65e94 https://github.com/ngircd/ngircd/commit/5b23b6ef39fac48e2a0327d9cdc1bea015e… Author: James <admin(a)floretos.com> Date: 2026-07-12 (Sun, 12 Jul 2026) Changed paths: M src/ngircd/conn.c Log Message: ----------- Disconnect clients that send data without a command terminator Handle_Buffer() scans the read buffer for a CR/LF command terminator and, when none is found, simply breaks out of the parsing loop without draining the buffer or closing the connection. The existing "Request too long" safeguard that disconnects over-long commands is only reached *after* a terminator has been located. As a result, a connection that sends COMMAND_LEN (513) or more bytes containing no CR or LF at all -- for example binary garbage, or a TLS ClientHello accidentally (or deliberately) sent to a plain-text listening port -- is never drained and never closed. Conn_Handler() then sets the io_dispatch() timeout to zero whenever a read buffer holds COMMAND_LEN or more bytes (command_available == true), so the main loop busy-spins, calling Handle_Buffer() on the same unparseable buffer over and over, pinning one CPU core at 100%. This is triggerable by any unauthenticated client and is an easy remote denial of service: a single stray TLS-to-plain-text connection is enough to peg a core indefinitely. Fix it by applying the same "Request too long" handling to the no-terminator case: if the read buffer already holds a whole command's worth of data without any terminator, it can never become a valid IRC message, so disconnect the client instead of spinning on it. Reproduce (pins a core at 100% CPU without this patch): perl -e 'print "A" x 600' | nc <host> <plain-text-port> Co-authored-by: Claude Opus 4.8 <noreply(a)anthropic.com> Closes #343 To unsubscribe from these emails, change your notification settings at https://github.com/ngircd/ngircd/settings/notifications

1 0

[ngircd/ngircd] 5d9f20: Update config.guess and config.sub to recent versions
by Alexander Barton 08 Jul '26

08 Jul '26

Branch: refs/heads/master Home: https://github.com/ngircd/ngircd Commit: 5d9f20a25a1ab31de7d160d6c2089e1def99bb69 https://github.com/ngircd/ngircd/commit/5d9f20a25a1ab31de7d160d6c2089e1def9… Author: Alexander Barton <alex(a)barton.de> Date: 2026-07-08 (Wed, 08 Jul 2026) Changed paths: M config.guess M config.sub Log Message: ----------- Update config.guess and config.sub to recent versions - config.guess: 2026-05-17 - config.sub: 2026-05-17 To unsubscribe from these emails, change your notification settings at https://github.com/ngircd/ngircd/settings/notifications

1 0