Commit graph

15 commits

Author SHA1 Message Date
copilot-swe-agent[bot]
e2649dd84f Final security improvements based on code review
- Add LAYOUT_ABBR_SIZE constant to avoid magic numbers
- Track allocated argv entries to properly free on error
- Simplify strncat bounds checking using strlen for accuracy
- Ensure all allocated memory is freed in error paths

Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-18 08:58:36 +00:00
copilot-swe-agent[bot]
d017fc4837 Address code review feedback on security fixes
- Fix buffer size for strncpy to match actual buffer (32 bytes)
- Use strtoul instead of strtol for unsigned color values
- Improve strncat bounds checking with accurate length tracking
- Free wordexp results immediately after use instead of batching
- Add strdup for wordexp strings to avoid use-after-free

Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-18 08:57:08 +00:00
copilot-swe-agent[bot]
9d2f852ec2 Fix critical buffer overflow and memory leak vulnerabilities
- Replace unsafe strcpy() with strncpy() in fetch/common.h
- Replace unsafe strcpy() with strncpy() in config parsing
- Fix buffer overflow from strcat() by adding bounds checking
- Fix memory leak by adding wordfree() for wordexp results
- Add integer overflow validation for strtol() calls
- Add errno checking for all strtol conversions

Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-18 08:54:42 +00:00
DreamMaoMao
2771053ee6 opt: animations logic all use the int type
avoid the coordinates being forcibly limited to positive numbers
2026-01-03 09:37:34 +08:00
DreamMaoMao
526a09c480 opt: not search disable node in xytonode 2025-12-27 09:54:29 +08:00
DreamMaoMao
5c314be8c6 break change: remove autostar.sh and MANGOCONFIG env 2025-12-03 16:22:13 +08:00
DreamMaoMao
1ffdc1ef38 feat: support -c option to specified config file 2025-12-03 16:12:05 +08:00
DreamMaoMao
b9952f03b5 opt: change unsigned int to uint32_t 2025-12-02 16:57:24 +08:00
DreamMaoMao
2f9cabe4b2 fix: sloppyfocus not work when move cursor slowly 2025-11-27 22:40:41 +08:00
DreamMaoMao
12e5c03600 fix: miss free kb_layout string 2025-11-01 22:54:53 +08:00
DreamMaoMao
38917d9f96 opt: allow use cursor to select ime popup item 2025-10-02 17:18:09 +08:00
DreamMaoMao
7a4eaeaa8e fix: miss free kb_layout memory 2025-08-27 10:23:33 +08:00
DreamMaoMao
b20b3ef9f6 change: change project name to mango 2025-07-30 15:03:10 +08:00
DreamMaoMao
b697e94fb4 opt: optimize code struct 2025-07-17 12:23:50 +08:00
DreamMaoMao
643a9fb4b7 opt: optimize code struct 2025-07-17 11:47:39 +08:00