qing e2f05f9a43 fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd ...

- P1-3: introduce ConnectionLock (mutex + atomic active) to close the residual
  CWE-362 race where _remove_client closes fd before reply/broadcast acquires
  the lock; senders now check active after locking and abort if fd was closed
- P2-7: make _server_fd std::atomic<int> to remove the data-race UB between
  stop() and _event_loop
- P2-8: validate on_message is non-null in MsgServer::start()
- P3-2: distinguish missing _route vs wrong-typed _route in RpcServer
- P3-3: set TCP_NODELAY/SO_SNDTIMEO before registering fd in _clients
- doc: add SO_SNDTIMEO precondition note to pmsg_send

2026-08-07 21:27:05 +08:00

..

AsyncQueue.hpp

fix(libmsg): complete security audit round 2 - fix P0 race + harden input validation

2026-08-07 21:01:34 +08:00

Msg_Basic.hpp

feat(libmsg): add pymsg C++ library with AsyncQueue, MsgServer, and JSON RPC layer

2026-08-06 23:48:06 +08:00

Msg.hpp

fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd

2026-08-07 21:27:05 +08:00

MsgServer.hpp

fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd

2026-08-07 21:27:05 +08:00

RpcClient.hpp

fix(libmsg): security audit round 3 - add server send timeout + harden RPC validation

2026-08-07 21:13:14 +08:00

RpcServer.hpp

fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd

2026-08-07 21:27:05 +08:00