TapTap 6d47d93fd7 fix(config): validate received counts before publishing them ...

The config_receive_{basis,skip,idmap}_count helpers wrote the
peer-controlled int through the Config member before range-checking it.
An over-cap basis_count therefore left config->basis_count huge while
config->basis_dirs was still NULL; config_receive()'s error path then
called config_delete(), whose basis loop dereferenced NULL and crashed
the daemon before authentication.

Read each count into a local, validate, and only then assign, leaving the
member untouched on failure.  config_delete() also guards the basis loop
with the array pointer as defense in depth.

Add a regression test that feeds over-cap basis/idmap/skip counts and
asserts rejection without crashing, plus a direct config_delete() check
on the partial (count set, array NULL) state.

2026-09-13 11:05:57 +02:00

..

fuzz

fix(client,protocol): EINTR-safe sends, armed abort, keepalive drain grace, TLS WANT_WRITE

2026-09-13 06:59:02 +02:00

integration

test: fuzz manifest/protocol/xattr, hardlink unit, fault injection

2026-09-13 06:24:46 +02:00

conftest.py

ci: address review — use --dist=load, per-module teardown, exclude setpriv

2026-09-08 17:25:56 +02:00

runner.c

test: fuzz manifest/protocol/xattr, hardlink unit, fault injection

2026-09-13 06:24:46 +02:00

test_array_list.c

harden: overflow guards, auth-user validation, TLS1.3 policy, build hardening

2026-09-13 00:59:21 +02:00

test_array_list.h

First Commit

2026-06-10 16:58:35 +02:00

test_batch.c

fix(p6-batch): reject clean EOF on record read; add traversal/EOF security tests

2026-09-10 22:05:18 +02:00

test_batch.h

feat(p6-batch): residual-batch write/read driver + codec

2026-09-10 21:40:07 +02:00

test_change_list.c

feat: add structured per-file change output model (-i, --list-only, --out-format, --log-file-format)

2026-09-06 12:34:10 +02:00

test_change_list.h

feat: add structured per-file change output model (-i, --list-only, --out-format, --log-file-format)

2026-09-06 12:34:10 +02:00

test_checksum.c

fix: reject xxh3 alias, pin handshake digest length to algorithm, simplify xxh64 copy, note FIPS md5

2026-09-07 19:50:52 +02:00

test_checksum.h

test: coverage for --checksum-choice/--cc and --checksum-seed

2026-09-07 17:42:53 +02:00

test_chunk.c

style: cppcheck — const-correctness in file_send_special and test_chunk

2026-09-08 22:53:47 +02:00

test_chunk.h

First Commit

2026-06-10 16:58:35 +02:00

test_client_cli.c

feat(client): --port alias, --threads=N, graceful abort, keepalive

2026-09-13 06:22:28 +02:00

test_client_cli.h

test: add unit test coverage for transports, config, file, multiprocessing (#131-#137)

2026-07-29 19:19:19 +02:00

test_compression.c

perf(compression,tcp): reuse zstd contexts; enable TCP_NODELAY

2026-09-13 04:18:55 +02:00

test_compression.h

Add compression and scanner tests; fix chunk_decompress data ownership bug, data_destroy NULL safety, chunk_compress memory leak

2026-07-04 21:25:34 +02:00

test_config.c

fix(config): validate received counts before publishing them

2026-09-13 11:05:57 +02:00

test_config.h

First Commit

2026-06-10 16:58:35 +02:00

test_credentials.c

fix(a7-auth): harden dummy-key temp creation

2026-09-12 19:29:23 +02:00

test_credentials.h

feat(d5-daemon-auth): password auth, --password-file, --early-input

2026-09-10 12:50:56 +02:00

test_daemon_conf.c

fix(daemon): close ACL fail-opens (v4-mapped peers, invalid patterns) and cap auth delay

2026-09-13 02:51:07 +02:00

test_daemon_conf.h

feat(d5-daemon-core): daemon lifecycle, module config, ::dest, PROTOCOL 2.15.0

2026-09-09 17:48:07 +02:00

test_data.c

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_data.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_delay_updates.c

fix: --delay-updates delete/backup collisions, publish-failure test, staging lock

2026-09-06 14:19:18 +02:00

test_delay_updates.h

feat: implement --delay-updates receiver staging and publication

2026-09-06 13:20:03 +02:00

test_delta.c

test: coverage for --checksum-choice/--cc and --checksum-seed

2026-09-07 17:42:53 +02:00

test_delta.h

feat: add delta transfer for incremental sync

2026-07-18 20:00:15 +02:00

test_file_list.c

fix(utils,file-list): bound keep/files-from indexes to O(M) memory

2026-09-13 04:52:10 +02:00

test_file_list.h

perf(utils,file-list): index delete keep-set and --files-from lookups

2026-09-13 04:16:28 +02:00

test_file_sendfile.c

refactor: remove dead API, rename to_disk/config_is_remote_dest, fix perror newlines

2026-08-30 13:50:42 +02:00

test_file_sendfile.h

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_file.c

refactor: remove dead file_store subsystem and unused wrappers

2026-09-13 05:19:18 +02:00

test_file.h

fix(p5-remote-option): wire server --trust-sender, align save-layer gates, add hostile-sender test

2026-09-09 14:23:59 +02:00

test_fuzz_smoke.c

refactor(config,metadata): shared invariants; length-bounded metadata parser

2026-09-13 05:24:23 +02:00

test_fuzz_smoke.h

test: add unit test coverage for transports, config, file, multiprocessing (#131-#137)

2026-07-29 19:19:19 +02:00

test_glob.c

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_glob.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_hardlink.c

test: fuzz manifest/protocol/xattr, hardlink unit, fault injection

2026-09-13 06:24:46 +02:00

test_hardlink.h

test: fuzz manifest/protocol/xattr, hardlink unit, fault injection

2026-09-13 06:24:46 +02:00

test_iconv.c

fix(p6-iconv): prevent convert buffer overflow; validate both directions; reset on error; more tests

2026-09-10 17:49:29 +02:00

test_iconv.h

test(p6-iconv): iconv unit, config wire-roundtrip, integration tests

2026-09-10 17:13:06 +02:00

test_log.c

fix(log): serialize message emission; clear log_fp before close; use logger

2026-09-13 01:44:59 +02:00

test_log.h

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_metadata.c

refactor(config,metadata): shared invariants; length-bounded metadata parser

2026-09-13 05:24:23 +02:00

test_metadata.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_motd.c

feat(d5-daemon-motd): daemon MOTD display + --no-motd

2026-09-10 13:52:24 +02:00

test_motd.h

feat(d5-daemon-motd): daemon MOTD display + --no-motd

2026-09-10 13:52:24 +02:00

test_multiprocessing.c

build: explicit CMake targets; move receiver pipeline out of shared

2026-09-13 07:20:28 +02:00

test_multiprocessing.h

fix: adapt tests and fix bugs from enhancements rebase onto main

2026-07-20 19:42:53 +02:00

test_property.c

merge: resolve dev (quality refactor) into security-fixes

2026-09-01 20:46:07 +02:00

test_property.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_protocol.c

feat(client): --port alias, --threads=N, graceful abort, keepalive

2026-09-13 06:22:28 +02:00

test_protocol.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_queue.c

test: harden allocation checks

2026-08-16 09:37:28 +02:00

test_queue.h

First Commit

2026-06-10 16:58:35 +02:00

test_receiver_timeout.c

fix(receiver): harden idle-progress definition, single error frame, sendfile timeout

2026-09-13 03:46:20 +02:00

test_receiver_timeout.h

fix(protocol): honor --timeout for protocol I/O; bound idle/session time

2026-09-13 03:29:01 +02:00

test_robustness.c

fix: enforce max alloc in delta deserialization

2026-09-04 02:25:26 +02:00

test_robustness.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_scanner.c

perf(send,scanner): byte-bound sender queues; drop redundant stat

2026-09-13 04:06:30 +02:00

test_scanner.h

Add compression and scanner tests; fix chunk_decompress data ownership bug, data_destroy NULL safety, chunk_compress memory leak

2026-07-04 21:25:34 +02:00

test_server_cli.c

refactor(cli): dedupe server/client option parsing and tighten CLI tests

2026-09-12 14:54:47 +02:00

test_server_cli.h

feat(d5-daemon-core): daemon lifecycle, module config, ::dest, PROTOCOL 2.15.0

2026-09-09 17:48:07 +02:00

test_server.c

fix(p8h-core): escape log paths, fail closed on identity activation, tidy server gate

2026-09-12 15:03:54 +02:00

test_server.h

test: add unit test coverage for transports, config, file, multiprocessing (#131-#137)

2026-07-29 19:19:19 +02:00

test_shared_utils.c

fix(utils,file-list): bound keep/files-from indexes to O(M) memory

2026-09-13 04:52:10 +02:00

test_shared_utils.h

First Commit

2026-06-10 16:58:35 +02:00

test_stop.c

fix(p6-stop): block delete-manifest on early stop; sync -m manifest access; overflow guard

2026-09-10 17:39:34 +02:00

test_stop.h

test(p6-stop): unit and integration tests for stop deadlines

2026-09-10 16:27:49 +02:00

test_stress.c

test: harden allocation checks

2026-08-16 09:37:28 +02:00

test_stress.h

testing: add comprehensive test suite for test-driven development

2026-07-20 14:44:35 +02:00

test_transport_ssh.c

security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup

2026-09-12 15:01:48 +02:00

test_transport_ssh.h

test: add transport module unit tests; docs: update README (#39, #119)

2026-07-21 16:55:07 +02:00

test_transport_tcp.c

perf(compression,tcp): reuse zstd contexts; enable TCP_NODELAY

2026-09-13 04:18:55 +02:00

test_transport_tcp.h

test: add transport module unit tests; docs: update README (#39, #119)

2026-07-21 16:55:07 +02:00

test_transport_tls.c

security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup

2026-09-12 15:01:48 +02:00

test_transport_tls.h

test: add transport module unit tests; docs: update README (#39, #119)

2026-07-21 16:55:07 +02:00

test_utils.h

fix: accept_loop race condition, auto-detect valgrind, cppcheck suppressions

2026-07-20 21:04:53 +02:00

test_xattr.c

fix(p8h-core): escape log paths, fail closed on identity activation, tidy server gate

2026-09-12 15:03:54 +02:00

test_xattr.h

acls/xattrs: -X/--xattrs, -A/--acls, --fake-super

2026-09-08 22:27:53 +02:00