jabber.developer2 a283c4e7b4 fix(xmpp): treat disco#info result without 'from' as from the server ...

RFC 6120 §8.1.2.1: a stanza received over a c2s stream without a 'from'
attribute must be treated as coming from the server itself. The
on-connect disco#info handler passed the absent attribute as NULL into
connection_features_received(), where g_str_hash() dereferenced the NULL
key and crashed (remotely triggerable DoS on connect).

Substitute connection_get_domain() at both disco#info handler
boundaries, and make connection_features_received() and
connection_get_features() NULL-safe as defense in depth. Add a stabber
regression test answering the on-connect disco#info with a from-less
result.

Fixes #168

2026-07-21 09:09:49 +03:00

..

functionaltests.c

fix(xmpp): treat disco#info result without 'from' as from the server

2026-07-21 09:09:49 +03:00

proftest.c

fix(xmpp): obfuscate client identity in protocol exchanges

2026-07-10 08:54:24 +00:00

proftest.h

feat(history): flat-file backend with bidirectional SQLite migration

2026-05-05 19:26:07 +00:00

start_profanity.sh

Set columns when running functional tests

2015-06-13 23:59:33 +01:00

test_ai.c

feat(ai): add AI client with multi-provider chat support

2026-05-15 02:21:54 +00:00

test_ai.h

feat(ai): add AI client with multi-provider chat support

2026-05-15 02:21:54 +00:00

test_autoping.c

feat(autoping): autoping availability warning

2026-06-23 11:11:25 +00:00

test_autoping.h

feat(autoping): autoping availability warning

2026-06-23 11:11:25 +00:00

test_carbons.c

refactor(tests): migrate to content-based stubbing

2026-01-07 11:46:40 +01:00

test_carbons.h

Trim excess whitespace

2021-08-26 01:18:10 +00:00

test_chat_session.c

refactor(tests): migrate to content-based stubbing

2026-01-07 11:46:40 +01:00

test_chat_session.h

Trim excess whitespace

2021-08-26 01:18:10 +00:00

test_connect.c

fix(xmpp): obfuscate client identity in protocol exchanges

2026-07-10 08:54:24 +00:00

test_connect.h

Trim excess whitespace

2021-08-26 01:18:10 +00:00

test_disco.c

fix(xmpp): treat disco#info result without 'from' as from the server

2026-07-21 09:09:49 +03:00

test_disco.h

fix(xmpp): treat disco#info result without 'from' as from the server

2026-07-21 09:09:49 +03:00

test_disconnect.c

refactor(tests): migrate to content-based stubbing

2026-01-07 11:46:40 +01:00

test_disconnect.h

Call UI disconnect functions before disconnecting with /disconnect

2016-01-05 01:30:32 +00:00

test_export_import.c

fix(xmpp): obfuscate client identity in protocol exchanges

2026-07-10 08:54:24 +00:00

test_export_import.h

feat(history): flat-file backend with bidirectional SQLite migration

2026-05-05 19:26:07 +00:00

test_history.c

feat(history): flat-file backend with bidirectional SQLite migration

2026-05-05 19:26:07 +00:00

test_history.h

feat(history): flat-file backend with bidirectional SQLite migration

2026-05-05 19:26:07 +00:00

test_i18n.c

merge: sync upstream profanity-im/profanity

2026-05-26 17:48:14 +00:00

test_i18n.h

merge: sync upstream profanity-im/profanity

2026-05-26 17:48:14 +00:00

test_lastactivity.c

fix(ui,db): harden NULL handling, fix CWE-134, optimize iterations

2026-02-06 19:27:40 +01:00

test_lastactivity.h

fix(ui,db): harden NULL handling, fix CWE-134, optimize iterations

2026-02-06 19:27:40 +01:00

test_message.c

fix: OTR/presence/OMEMO correctness, stanza-id disco gate, build hardening

2026-06-20 10:30:23 +00:00

test_message.h

fix: OTR/presence/OMEMO correctness, stanza-id disco gate, build hardening

2026-06-20 10:30:23 +00:00

test_muc.c

fix(xmpp): obfuscate client identity in protocol exchanges

2026-07-10 08:54:24 +00:00

test_muc.h

fix(ui,db): harden NULL handling, fix CWE-134, optimize iterations

2026-02-06 19:27:40 +01:00

test_ping.c

refactor(tests): migrate to content-based stubbing

2026-01-07 11:46:40 +01:00

test_ping.h

Only send ping requests to client that support it

2017-06-16 00:59:21 +01:00

test_presence.c

fix(xmpp): obfuscate client identity in protocol exchanges

2026-07-10 08:54:24 +00:00

test_presence.h

Remove status from cl_ev_presence_send

2017-01-15 23:59:31 +00:00

test_receipts.c

merge: sync upstream profanity-im/profanity

2026-05-26 17:48:14 +00:00

test_receipts.h

Trim excess whitespace

2021-08-26 01:18:10 +00:00

test_rooms.c

refactor(tests): migrate to content-based stubbing

2026-01-07 11:46:40 +01:00

test_rooms.h

Trim excess whitespace

2021-08-26 01:18:10 +00:00

test_roster.c

refactor(tests): migrate to content-based stubbing

2026-01-07 11:46:40 +01:00

test_roster.h

Add nickname support for /roster remove

2023-04-13 16:41:21 +02:00

test_software.c

refactor(tests): migrate to content-based stubbing

2026-01-07 11:46:40 +01:00

test_software.h

Trim excess whitespace

2021-08-26 01:18:10 +00:00