Patch fix for lots of crashes

This patch release fixes a bunch of crashes that were introduced in the last release, 0.10.1.

If you have 0.10.1 running, replace it with this release.

For a more in-depth explanation, we refactored how we referred to channels in the code. With those changes we introduced a bug that incorrectly dereferences channels in certain situations. That bug is fixed by this latest release. Because we refer to channels in a lot of places, this bug can occur in a lot of places.

Security

• Fixed lots of miscellaneous crashes.

Security channel mode fix, error-recovery and SAMODE improvements

This patch release of Oragono fixes a fairly big channel mode bug, where users could set channel modes when they weren't actually allowed to.

Config Changes

• recover-from-errors key added under debug, which enables recovery from client-caused errors (at the cost of possible server instability).

Security

• Clients could set channel modes when they weren't supposed to be able to.

Added

• We now allow recovering from client-caused panics.

Fixed

• SAMODE now lists other users' modes.
• Removed some possible crashes and races.

Updates, Fixes, and More!

There has been a bunch of new changes in this release! From sts being ratified to supporting WEBIRC to rewriting a whole lot of our internals, 0.10.0 represents a real step forward in terms of where Oragono's going.

In addition to the new features, this issue fixes a bunch of fairly large bugs (such as an errant INVITE being able to crash the server, the +mRchannel modes not working at all, and making rehashing safer).

I'd like to thank @slingamn for really contributing a lot in this release! He's done a whole bunch of the internal work, cleaned up the code, and in general just been a great help while developing. Running Oragono on an actual network has really helped find and track down some serious bugs, and lead us to some much-needed improvements.

Config Changes

• motd-formatting key added under server, which supports MOTD formatting characters.
• rest-api section removed from server (since we no longer support the Rest API).
• webirc section added under server, which specifies the gateways can use the WEBIRC command.
• ws-listen key removed from server (since we no longer support websocket ports).
• Connection limits and connection throttling has become more relaxed by default.

Security

• INVITE: Fixed a server crash when sending an invite for a channel that doesn't exist (thanks @josephbisch for telling me about the bug!).

Added

• Added support for the WEBIRC command, allowing gateways to connect.
• We now list XLINEs with DLINE LIST and KLINE LIST.
• We now support using escaped formatting codes in the MOTD (tl;dr easy colors, bold and italics).

Changed

• D-LINE and K-LINE code is now cleaner under the hood and less likely to crash.
• Ident (looking up usernames) now times out a whole lot quicker, meaning you connect to the server more quickly.
• IRCv3 capability draft/sts has been renamed to sts, since it's now been ratified.
• Rehashing is now safer.
• Server opers could always speak on channels, even when they shouldn't be able to. Now they aren't above the law.

Removed

• Removed the draft/message-ids cap since... it doesn't actually exist. The feature is now enabled by default when clients request the draft/message-tags-0.2 capability, as written in the Message IDs spec.
• Removed websocket support (conflicted with existing larger IRCd's implementations and not used by any real clients).
• REST API has been removed, until we can build up the web interface in parallel with it.

Fixed

• AWAY was sending an incorrect mode string, and now sends the correct mode string (thanks @jwheare for pointing this out).
• Fixed some bugs with our MONITOR implementation which meant we weren't returning the right info to clients.
• The Moderated (+m) and RegisteredOnly (+R) channel modes could not be set. Now they can be set.

v0.9.2-beta patch release

Another day, another release. I think this should be pretty stable, but there have been a whole lot of changes underneath the hood (to try and make things cleaner, safer, and more stable). The main visible changes between this and -alpha are the addition of a new way to format MOTDs (add colours, bold, and italics), and that we've removed the REST API!

Config Changes

• motd-formatting key added under server, which supports MOTD formatting characters.
• rest-api section removed from server (since we no longer support the Rest API).
• ws-listen key removed from server (since we no longer support websocket ports).

Added

• We now support the PROXY command (letting people use HAProxy to terminate TLS and similar).
• We now support using escaped formatting codes in the MOTD (tl;dr easy colors, bold and italics).

Changed

• D-LINE and K-LINE code is now cleaner under the hood and less likely to crash.
• Rehashing is now safer.
• Server opers could always speak on channels, even when they shouldn't be able to. Now they aren't above the law.

Removed

• Removed the draft/message-ids cap since... it doesn't actually exist. The feature is now enabled by default when clients request the draft/message-tags-0.2 capability, as written in the Message IDs spec.
• Removed websocket support (conflicted with existing larger IRCd's implementations and not used by any real clients).
• REST API has been removed, until we can build up the web interface in parallel with it.

Fixed

• AWAY was sending an incorrect mode string, and now sends the correct mode string (thanks @jwheare for pointing this out).
• Fixed some bugs with our MONITOR implementation which meant we weren't returning the right info to clients.
• The Moderated (+m) and RegisteredOnly (+R) channel modes could not be set. Now they can be set.

v0.9.2-alpha patch release

There's some interesting bugs in v0.9.1 like +m and +R on channels not working, and we've done some changes that haven't been fully tested yet like changing how rehashing and XLINEs work under the hood. I'm not yet comfortable cutting a new full release with all these changes so here's an alpha containing them!

Changed

• D-LINE and K-LINE code is now cleaner under the hood and less likely to crash.
• Rehashing is now safer.

Removed

• Removed the draft/message-ids cap since... it doesn't actually exist. The feature is now enabled by default when clients request the draft/message-tags-0.2 capability, as written in the Message IDs spec.
• Removed websocket support (conflicted with existing larger IRCd's implementations and not used by any real clients).

Fixed

• AWAY was sending an incorrect mode string, and now sends the correct mode string.
• The Moderated (+m) and RegisteredOnly (+R) channel modes could not be set. Now they can be set.

Bugfixes and Compatibility!

This is a patch release to fix compatibility with Irssi and resolve some issues! Thanks very much @dequis, @slingamn and squigz for the help and for bringing up the issues.

Added

• Allow the MODE b syntax, which certain clients use to check lists.

Changed

• QUIT: We now send the actual quit message to other users.

Fixed

• Fix incorrectly forwarding AWAY messages to clients without away-notify.
• Fix incorrect login check which prevented account registration.
• Fix ERR_NOSUCHNICK numerics (we weren't sending the nick correctly).

Less crashes, memory leaks and new configuration options!

So many fixes! You can now set the default modes for new channels, use HAProxy again, use the umode +R to protect yourself against unwanted PMs, and we now warn on configurations/setups that look incorrect!

In addition, this release makes testing easier, makes sure we better adhere to the SASL specification and also removes some memory leaks around the place. All in all, just a solid upgrade and less bugs across the board.

Thanks to @slingamn and @euank for the awesome help with this release!

Patch release to fix a channel priv-setting bug.

Just a patch release to fix a bug! The bug that's been fixed prevented you from modifying channel privilidges at all, which isn't great. With this release, now you can do so again!

This is one I'm gonna have to add to the testcases, to make sure it doesn't happen again.

Fixed

• Fixed a bug where users could not give other users operator/halfop/voice in channels.

Fixes, Oper Oversight and Quality-of-Life Improvements!

Lots of quality-of-life fixes, improved oversight for opers, and a proposed channel renaming command!

With this release, we're moving to a proper Github organisation, becoming more consistent with other IRCds, and introducing a bunch more snomasks. In addition, when setting DLINE and KLINE bans, you can also kill all clients who match the ban by supplying the parameter ANDKILL when you set the ban.

Channel LIST filtering is now more useful, and I'll keep expanding this in future releases. As well, there's been some useful extensions to WHOIS, and a bug with SANICK fixed thanks to @lbeziaud. @enckse has also added Oragono to the Arch AUR, to make it easier to install on that distro.

Thanks to everyone for suggesting improvements and reporting issues! There's a lot to do as we move forward, and I have a pretty decent plan of where to go next.

Added

• Added proposed channel rename capability draft/rename.
• Send a bunch more server notice masks, now including:
  • j: Channel registration.
  • k: Kills, including those resulting from DLINEs and KLINEs.
  • n: Nick changes.
  • o: Clients opering-up.
  • q: Clients quitting.
  • u: Account registration and login.
  • x: Setting and removing DLINE/KLINE.

Changed

• DLINE and KLINE: Added ANDKILL parameter to also kill all clients that match the ban.
• LIST: Implement extended list conditions U (which filters the channels by user count).
• Renamed a number of dependency libraries, and changed Oragono to its' own organisation (only useful if you're building Oragono from source).
• WHOIS: Show the target's real IP address if you're whoising yourself or you're an oper.
• WHOIS: Show whether the target has connected securely using TLS.

Removed

• Removed the JOIN 0 command (matching what InspIRCd has done here), since this is easily abusable.

Fixed

• SANICK works properly now (thanks @lbeziaud!).

Debugging, Fixes, and Realtime Monitoring

Debugging! Fixes! Better realtime monitoring!

This release isn't too exciting, but packs large improvements to how we handle floods and similar issues. As well, the introduction of snomasks (take a look at /HELPOP snomasks) should help opers keep a basic view over their server during use. Only the "c" (connects) snomask is active right now, but others will be added and extended in future releases.

Config Changes

• Added debug section containing additional debug settings.
• Added modes key on oper config, for setting modes on oper-up.
• Added ability to log to stdout in logger methods.

Added

• Added ability to log to stdout.
• Added ability to use StackImpact profiling.
• Added initial server notice masks (snomasks).

Changed

• Socket code rewritten to be a lot faster and safer.
• Updated account registration to use the latest proposed syntax (now being /ACC REGISTER instead of /REG CREATE).

Fixed

• Clients now timeout properly if they don't complete connection registration.
• Word wrapping (with draft/maxline) no longer randomly drops characters.