hanez
72f7812630
- Added secure_state_open(): hardened file open with O_CLOEXEC, O_NOFOLLOW, mode 0600, regular-file and ownership checks. Prevents symlink attacks, TOCTOU races, and world-writable temp files. - Replaced all fopen() calls for temp state files with secure_state_open() + fdopen() across hot reload, compile-restart, and rebuild paths. - Hardened TLS initialization: enforces minimum TLS 1.2, disables compression, checks SSL_CTX_set_default_verify_paths() return value. - CMake compiler/linker hardening: -Wformat=2, -Wstrict-prototypes, -fstack-protector-strong, _FORTIFY_SOURCE=3, RELRO, noexecstack. - Added !calc input validation: max 256 chars, numeric-only characters. - Added !stock symbol validation: alphanumerics plus .-^= only. - Fixed !quit, !reload, !restart to require channel context (DMs rejected). - Fixed log timestamp format: %y (2-digit) to %Y (4-digit year). - Fixed asprintf return value check in !forecast error paths. - Fixed !reload fork-in-place mode: only saves TLS state when exec_new=1. - Cleaned up reload state file on failure and in fork child. - Fixed git SSH-to-HTTPS URL conversion in !gitlog and !changelog. - AI plan mode no longer passes --dangerously-skip-permissions. - Added IRC buffer overflow protection: oversized lines are dropped. - Added doc comments to ZYNK_RELOAD_FILE, secure_state_open(), RateLimitEntry, and rate_limits.
37 lines
1.1 KiB
C
37 lines
1.1 KiB
C
#ifndef CMD_RESTART_H
|
|
#define CMD_RESTART_H
|
|
|
|
#include "zynk.h"
|
|
|
|
/*
|
|
* cmd_restart - Handle the "!restart" command.
|
|
*
|
|
* Requires channel op. Functionally identical to cmd_reload: sends a
|
|
* "Restarting..." message then triggers reload_do(). Rate-limited.
|
|
*
|
|
* Parameters:
|
|
* s - The IRC session.
|
|
* msg - The raw message text.
|
|
* reply_target - Channel or nick to reply to.
|
|
* src_nick - The nick of the user who sent the command.
|
|
* tgt - The message target (channel or nick).
|
|
*
|
|
* Returns: 1 if matched, 0 otherwise.
|
|
*/
|
|
int cmd_restart(Session *s, const char *msg, const char *reply_target, const char *src_nick, const char *tgt) {
|
|
if (strcmp(msg, "!restart") != 0) return 0;
|
|
if (tgt[0] != '#') {
|
|
irc_msg(s, reply_target, "!restart can only be used by an op in a channel");
|
|
return 1;
|
|
}
|
|
if (!chan_is_op(tgt, src_nick)) {
|
|
irc_msg(s, reply_target, "You need op to restart me");
|
|
return 1;
|
|
}
|
|
if (rate_limit_check(src_nick, reply_target) < 0) return 1;
|
|
irc_msg(s, reply_target, "Restarting...");
|
|
reload_do(s, reply_target, 0);
|
|
return 1;
|
|
}
|
|
|
|
#endif
|