Block a user
fix: resolve all security issues (#154, #156, #157, #159, #160, #161, #162, #170)
Batch fix: NULL checks, input validation, and code refactoring (#152, #149, #150, #151)
refactor: config_create(), main(), send_files() — reduce duplication and complexity (#149, #150, #151)
Batch fix: NULL checks, input validation, and code refactoring (#152, #149, #150, #151)
Security: Delta and chunk deserialization don't validate array counts/sizes from network
Bug/Security: chown() failures during metadata restoration are silently ignored
Bug/Performance: sendfile() loop treats EAGAIN / EINTR as fatal errors
Bug: Server receive_thread doesn't propagate file_receive / chunk receive errors
Bug: client_cli.c may free() a string literal for server_host
TapTap
created branch integration/2026-07-29-batch-fix in TapTap/FastSync
2026-07-29 18:36:31 +02:00
26be780da2
Merge remote-tracking branch 'origin/fix/refactor-cli-config' into integration/2026-07-29-batch-fix
Bug/Quality: Protocol layer uses global I/O state; io_ssl is not thread-local
Bug: Transfer functions return -1, causing implementation-defined exit status
Bug: --delete manifest sending ignores send_status / send_int / send_str failures
Security: --delete follows symlinks and may delete outside destination tree
Security: TLS client lacks hostname verification
Security: TLS I/O doesn't handle SSL_ERROR_WANT_READ / SSL_ERROR_WANT_WRITE
Security: zstd decompression may allocate ZSTD_CONTENTSIZE_UNKNOWN bytes