hanez
72f7812630
- Added secure_state_open(): hardened file open with O_CLOEXEC, O_NOFOLLOW, mode 0600, regular-file and ownership checks. Prevents symlink attacks, TOCTOU races, and world-writable temp files. - Replaced all fopen() calls for temp state files with secure_state_open() + fdopen() across hot reload, compile-restart, and rebuild paths. - Hardened TLS initialization: enforces minimum TLS 1.2, disables compression, checks SSL_CTX_set_default_verify_paths() return value. - CMake compiler/linker hardening: -Wformat=2, -Wstrict-prototypes, -fstack-protector-strong, _FORTIFY_SOURCE=3, RELRO, noexecstack. - Added !calc input validation: max 256 chars, numeric-only characters. - Added !stock symbol validation: alphanumerics plus .-^= only. - Fixed !quit, !reload, !restart to require channel context (DMs rejected). - Fixed log timestamp format: %y (2-digit) to %Y (4-digit year). - Fixed asprintf return value check in !forecast error paths. - Fixed !reload fork-in-place mode: only saves TLS state when exec_new=1. - Cleaned up reload state file on failure and in fork child. - Fixed git SSH-to-HTTPS URL conversion in !gitlog and !changelog. - AI plan mode no longer passes --dangerously-skip-permissions. - Added IRC buffer overflow protection: oversized lines are dropped. - Added doc comments to ZYNK_RELOAD_FILE, secure_state_open(), RateLimitEntry, and rate_limits.
38 lines
1.2 KiB
C
38 lines
1.2 KiB
C
#ifndef CMD_RELOAD_H
|
|
#define CMD_RELOAD_H
|
|
|
|
#include "zynk.h"
|
|
|
|
/*
|
|
* cmd_reload - Handle the "!reload" command.
|
|
*
|
|
* Requires channel op if used in a channel. Rate-limited. Triggers
|
|
* reload_do() which serializes bot state, exec's a fresh copy of the
|
|
* binary, and restores state. This allows updating the bot without
|
|
* disconnecting from IRC.
|
|
*
|
|
* Parameters:
|
|
* s - The IRC session.
|
|
* msg - The raw IRC message text.
|
|
* reply_target - Channel or nick to send the response to.
|
|
* src_nick - The nick of the user who issued the command.
|
|
* tgt - The channel or nick the message was sent to.
|
|
*
|
|
* Returns: 1 if the command was matched, 0 otherwise.
|
|
*/
|
|
int cmd_reload(Session *s, const char *msg, const char *reply_target, const char *src_nick, const char *tgt) {
|
|
if (strcmp(msg, "!reload") != 0) return 0;
|
|
if (tgt[0] != '#') {
|
|
irc_msg(s, reply_target, "!reload can only be used by an op in a channel");
|
|
return 1;
|
|
}
|
|
if (!chan_is_op(tgt, src_nick)) {
|
|
irc_msg(s, reply_target, "You need op to reload");
|
|
return 1;
|
|
}
|
|
if (rate_limit_check(src_nick, reply_target) < 0) return 1;
|
|
reload_do(s, reply_target, 0);
|
|
return 1;
|
|
}
|
|
|
|
#endif
|