qing 3c50a862d3 fix(libmsg): complete security audit round 2 - fix P0 race + harden input validation ...

- P0: fix _close_all_clients() race condition (CWE-362) - hold per-connection send_lock
  before close() to prevent messages being sent to wrong client after fd reuse
- P2: add comprehensive input validation for all public APIs
  (timeout/port/workers/max_connections/batch_size etc. bounds checking)
- P2: add UTF-8 payload validation (isValidUtf8) aligning with Python pymsg behavior,
  rejecting overlong encodings, surrogate pairs, truncated/invalid sequences
- P2: document pmsg_recv(int) precondition and recommend deadline mode
- add constructor validation for MsgClient/MsgServer/AsyncQueue/RpcClient/RpcServer
- add add_route() validation for empty route name and null handler
- update security audit report with round 2 findings and fixes (8 issues total, 100% fixed)

2026-08-07 21:01:34 +08:00

..

ai_review_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

aibox_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

BotOps_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

captcha_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

confs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

core_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

db2_SECURITY_AUDIT_20260806.md

fix(db2): add numeric config range validation (fix P2-3/P3-8)

2026-08-07 20:48:22 +08:00

db_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

DEPLOY_SECURITY_AUDIT_20260801.md

docs: aggregate project documentation under docs/ with unified index

2026-08-03 13:21:48 +08:00

DEPS_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

dnfs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

gateway_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

libhttp_SECURITY_AUDIT_20260803.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

libmsg_SECURITY_AUDIT_20260806.md

fix(libmsg): complete security audit round 2 - fix P0 race + harden input validation

2026-08-07 21:01:34 +08:00

libsqlite3_SECURITY_AUDIT_20260806.md

docs(security): 更新 libsqlite3 审计报告修复状态

2026-08-06 18:14:01 +00:00

libth_SECURITY_AUDIT_20260804.md

docs: 新增 libth 安全审计与 aibox 开放版开发计划

2026-08-04 19:02:22 +08:00

pymsg_SECURITY_AUDIT_20260801.md

fix(pymsg): 异常信息脱敏与JSON深度/大数字限制，防信息泄露与DoS

2026-08-03 22:30:17 +08:00

SECURITY_HARDENING_PLAN_20260803.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

smtp_SECURITY_AUDIT_20260801.md

feat(aibox): 创建/安装技能工具统一生成 .md 扩展名 + 下线旧版 smtp.py

2026-08-04 08:26:57 +08:00

static_SECURITY_AUDIT_20260801.md

fix(static): 禁用 yhdet 系列功能并迁移数据库访问到 db 服务

2026-08-03 22:05:02 +08:00

waf_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00