30 Commits

Include renames

Author	SHA1	Message	Date
TapTap	34abaadb9a	fix: address low/informational sec-parser follow-ups ... - client_cli: capture errno before output_escape() in read_patterns_from_file() so an over-long line is still reported as EFBIG instead of the (possibly malloc-clobbered) errno. - file_list: guard string_list_add() capacity doubling against overflow (capacity > INT_MAX / 2), matching filter_rule_list_add(); callers already surface the false as a memory-allocation error. - compression: ZSTD_isError() is true for ZSTD_CONTENTSIZE_UNKNOWN, which made the 3x unknown-size fallback dead code. Test the CONTENTSIZE_ERROR/UNKNOWN sentinels explicitly so unknown-size frames reach the estimate path (still bounded by the existing hard limit) while invalid frames are rejected. Known-size frames and the 100 MB ceiling/overflow checks are unchanged. - tests: add an unknown-content-size-frame decompression test. Tests: ./build/tests and ./build-asan/tests all pass (42/42); clang-format + cppcheck clean.	2026-09-14 17:11:02 +02:00
TapTap	e48f19ee2b	fix(compression): fail truncated zstd frames instead of spinning ... data_decompress_limited() looped while ZSTD_decompressStream() returned a positive hint. A truncated frame keeps returning that hint with all input consumed, so a malformed/truncated payload spun forever (CPU DoS). Detect input exhaustion with an incomplete frame and fail via the existing cleanup, skipping the check when the output buffer merely needs to grow first. Add a fork+alarm regression test that truncates a valid frame and asserts decompression returns NULL promptly.	2026-09-14 16:39:05 +02:00
TapTap	c944787e03	refactor: remove dead file_store subsystem and unused wrappers	2026-09-13 05:19:18 +02:00
TapTap	6c636a19e6	perf(compression,tcp): reuse zstd contexts; enable TCP_NODELAY	2026-09-13 04:18:55 +02:00
TapTap	90112a7585	Merge remote-tracking branch 'origin/feat/max-alloc' into dev	2026-09-05 02:13:35 +02:00
TapTap	3304541337	Merge remote-tracking branch 'origin/feat/compress-threads' into dev	2026-09-05 02:01:43 +02:00
TapTap	6a95efbe41	Merge remote-tracking branch 'origin/feat/skip-compress' into dev	2026-09-04 18:35:19 +02:00
TapTap	ec02ee6dde	fix: bound compression worker threads	2026-09-03 22:22:04 +02:00
TapTap	d69f5db652	feat: add rsync-compatible max-alloc limit	2026-09-03 18:23:45 +02:00
TapTap	f443b2986d	feat: add compression worker threads	2026-09-03 18:15:14 +02:00
TapTap	2a08a7ba5c	feat: add skip-compress option	2026-09-03 17:56:27 +02:00
TapTap	5c7d82b79c	feat: add rsync debug flags	2026-09-03 16:18:46 +02:00
TapTap	d102622e28	fix: close remaining PR review gaps	2026-08-16 09:35:26 +02:00
TapTap	05a74770ca	fix: address PR #200 review issues ... - Restore PROTOCOL_VERSION to a forward-compatible 2.1.0 and document wire format - Add NULL guard to config_delete - Add pipeline cancellation flag and cancellation-aware queue helper - Join running threads before destroying pipeline contexts on creation failure - Fix NULL dereference and memory leaks in manifest/chunk handling - Fix TLS/TCP socket fd leak on connect error paths - Add compression-level range validation (1-22) - Close previous log file before opening a new one - Use getline for unbounded pattern-file lines - Fix thread-unsafe localtime() and add log level bounds check - Fix file_load_data to clean up data on read size mismatch - Add hard ceiling to decompression buffer growth - Fix mkdir_r bounds check and restore glob comments - Add send_str NULL guard and mutex-protect bandwidth limiter - Update AGENTS.md for per-thread io_ssl contract	2026-08-02 09:34:54 +02:00
TapTap	69773bd16a	fix: resolve all security issues (#154, #156, #157, #159, #160, #161, #162, #170)	2026-07-29 18:52:08 +02:00
TapTap	e68e33c0c5	Apply PR #143 content on top of latest main	2026-07-29 18:18:07 +02:00
TapTap	d3dca6c2a5	Revert "Merge pull request 'Merge all 5 batch PRs: security, CLI features, protocol, performance, tests/docs' (#143) from merge-all-v2 into main" ... This reverts commit 29f4f8cde6, reversing changes made to c6bf7bb84e.	2026-07-29 18:10:01 +02:00
TapTap	4bba1e8c02	perf: performance improvements (#107-#111)	2026-07-21 16:59:46 +02:00
TapTap	bcf5ffcf40	Revert "Merge pull request 'Fix memory/null safety bugs (#74, #72, #69, #64, #60, #50, #49, #65)' (#80) from fix/memory-safety into main" ... This reverts commit ddfdb3825a, reversing changes made to 504a3a4d4f.	2026-07-20 19:36:09 +02:00
TapTap	e6e8679bfc	Revert "Merge pull request 'Fix logic/correctness bugs (#73, #68, #67, #66, #59, #58, #54, #48, #53)' (#82) from fix/logic-correctness into main" ... This reverts commit 28d076fc28, reversing changes made to df0f52ce39.	2026-07-20 19:36:09 +02:00
TapTap	4383caa3bb	fix: logic/correctness bugs — issues #73, #68, #67, #66, #59, #58, #54, #48, #53	2026-07-20 19:04:35 +02:00
TapTap	4dbb2b4f8b	fix: memory/null safety bugs — issues #74, #72, #69, #64, #60, #50, #49, #65	2026-07-20 18:56:22 +02:00
TapTap	38be7c090a	Fix 11 Gitea issues (#29, #30, #31, #35, #38, #41, #42, #43, #44, #45, #46) ... #29 - compression_level now used in data_compress() #30 - chunk_size no longer truncated to 32-bit #31 - chmod/chown failures now logged #35 - strtok -> strtok_r for thread safety #38 - open_next_directory returns -1 on opendir failure #41 - file_send_sendfile uses compression_level param #42 - dirname() uses copy to avoid modifying input #43 - delete_extras_walk checks manifest before rmdir #44 - server_host/port moved into Config struct #45 - SSH parse_remote_dest uses dynamic allocation #46 - send_chunk refactored, reduced nesting/duplication	2026-07-20 17:09:12 +02:00
TapTap	23b1d6660c	fix: reformat codebase and fix const-correctness for CI lint ... - Reformat all C/H files to match .clang-format (LLVM style) - Fix 26 cppcheck const-correctness warnings (constParameterPointer, constVariablePointer, constVariable) - Update function declarations in headers to match const parameters	2026-07-19 15:57:31 +02:00
TapTap	02266710fb	ci: add static analysis, sanitizers, and formatting enforcement ... Add Tier 1 review automation to catch issues before human review: - Add cppcheck and clang-format to CI lint job - Add sanitizer matrix (ASan + TSan) CI job - Enable -Wextra -Wpedantic -Werror in CI build - Add SANITIZER and STRICT_WARNINGS CMake options - Add .clang-format for consistent code style - Update Dockerfile with cppcheck and clang-format - Fix sign-compare and unused-parameter warnings for -Werror	2026-07-19 15:37:18 +02:00
TapTap	a62894be05	Merge main into server-improvements: resolve conflicts (protocol signatures, error returns)	2026-07-16 15:08:56 +02:00
TapTap	bbdf027be8	Fix exit() in library code, add --include/--max-size/--min-size	2026-07-16 14:15:38 +02:00
TapTap	efb98d8964	Multi-client server, protocol versioning, streaming decompression fixes	2026-07-16 13:59:41 +02:00
TapTap	52571bc960	streaming zstd: switch to ZSTD_compressStream2 / ZSTD_decompressStream ... Replaced one-shot ZSTD_compress / ZSTD_decompress with streaming API (ZSTD_compressStream2 + ZSTD_decompressStream) in both data_compress and data_decompress. Interface unchanged. Prepares for true streaming transfer where compression can be interleaved with transmission.	2026-07-16 12:29:31 +02:00
TapTap	02619cca5c	refactor: split monolithic modules and extract shared components ... - Remove dead socket.c/socket.h (accumulated duplicate symbols) - Extract compression.h/c (data_compress/decompress from data.c) - Extract io.h/c (low-level I/O from protocol.c) - Extract metadata.h/c (unified metadata wire format from file.c, chunk.c, utils.c) - Split client.c into client_cli.c (CLI parsing) + client_send.c (send logic) - Move receiver pipeline threads from server.c to multiprocessing.c - Move to_disk/file_restore_metadata from utils.c to file.c/metadata.c - Fix const qualifiers on to_disk and str_dup signatures - Suppress chown unused-result warning	2026-07-15 19:36:26 +02:00