xavi/slcl, branch v0.4.2Small and lightweight cloud storage written in C99 and POSIX.1-2008.
https://gitea.privatedns.org/xavi/slcl/atom?h=v0.4.22026-02-08T21:14:37+00:00main.c: Fix null pointer access on empty data2026-02-08T21:14:37+00:00Xavier Del Campo Romeroxavi92@disroot.org2026-02-08T21:08:58+00:00urn:sha1:dd1ceb550c13d433cd26191ec3176eca0e2d70a1
If users send no payload data to a POST request, libweb sets a null
pointer as part of the payload. Therefore, null pointers must always be
checked as a sanity check.
configure: Add libsodium flags to USERGEN_LDFLAGS2026-02-03T15:26:19+00:00Xavier Del Campo Romeroxavi92@disroot.org2026-02-03T15:25:10+00:00urn:sha1:0aa3102b79e327a3fb7695ded258f0cec7ad93f4
Otherwise, usergen(1) would be built without linking against libsodium,
and thus would fail to build.
Bump libweb2025-10-26T19:15:14+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-26T19:15:14+00:00urn:sha1:26a033847cffe607b2df4b0f0e5bd484bb0593de
The following commit fixes a memory leak caused by untrusted user input:
commit 953210bd1930e1734f1acde86eadd7a1997bb7c3
Author: Xavier Del Campo Romero
Date: Sun Oct 26 20:12:46 2025 +0100
form.c: Fix leak on invalid form
When one or more entries have been appended to a struct form instance,
but then an error occurs, those valid entries must be deallocated, too.
README.md: Replace OpenSSL with libsodium2025-10-10T23:20:02+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-10T23:20:02+00:00urn:sha1:a53f6b3975026aeb9f7e0a524f4dfd1cd81dff25
This was a leftover from the following commit:
commit 10e42591ac72285736d5cc4ee5e7c2f68dbf1e4b
Author: Xavier Del Campo Romero
Date: Wed Oct 8 13:50:52 2025 +0200
Replace OpenSSL with libsodium and argon2id
page.c: Align results to center2025-10-10T13:29:55+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-10T13:29:55+00:00urn:sha1:6a3a0f45f65f9be58867f271ff2a027548789bd7page.c: Ensure trailing '/' on dir download URLs2025-10-10T09:20:25+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-10T09:20:25+00:00urn:sha1:4fa8915c8cd42b8bc30df3714e5163c4f4bece89
Otherwise, it is not ensured web browsers would translate a relative
directory such as "dir/.." to a URL with a trailing '/'. Therefore, a
POST request to "/user?download=1" would fail because slcl only
considers "/user/" (note the trailing '/') as valid.
zip.c: Fix endless loop on empty archives2025-10-10T07:40:34+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-10T07:40:34+00:00urn:sha1:942559d321551e93cd6bae0b03de03e7cc13042c
When an empty directory is to be downloaded, z->lread would always equal
zero because read_file is never called.
Therefore, it is more sensible not to assume any number of bytes, and
just dump as much data as possible into buf.
zip.c: Remove unused variable2025-10-10T07:40:18+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-10T07:40:18+00:00urn:sha1:80d179f9fe013d727f571f4730ebbe4d228c9382README.md: Add build instructions for thumbnail2025-10-09T21:03:17+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-09T21:03:17+00:00urn:sha1:f15d534796129c53f2c24bf8eb9b69d686b957b0README.md: Update copyright notice2025-10-09T21:03:03+00:00Xavier Del Campo Romeroxavi92@disroot.org2025-10-09T21:03:03+00:00urn:sha1:8f21b3e034b65fa82fbd7da8fe841fece21df357