qing e2f05f9a43 fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd ...

- P1-3: introduce ConnectionLock (mutex + atomic active) to close the residual
  CWE-362 race where _remove_client closes fd before reply/broadcast acquires
  the lock; senders now check active after locking and abort if fd was closed
- P2-7: make _server_fd std::atomic<int> to remove the data-race UB between
  stop() and _event_loop
- P2-8: validate on_message is non-null in MsgServer::start()
- P3-2: distinguish missing _route vs wrong-typed _route in RpcServer
- P3-3: set TCP_NODELAY/SO_SNDTIMEO before registering fd in _clients
- doc: add SO_SNDTIMEO precondition note to pmsg_send

2026-08-07 21:27:05 +08:00

..

ai_review_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

aibox_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

BotOps_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

captcha_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

confs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

core_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

db2_SECURITY_AUDIT_20260806.md

fix(db2): add numeric config range validation (fix P2-3/P3-8)

2026-08-07 20:48:22 +08:00

db_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

DEPLOY_SECURITY_AUDIT_20260801.md

docs: aggregate project documentation under docs/ with unified index

2026-08-03 13:21:48 +08:00

DEPS_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

dnfs_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00

gateway_SECURITY_AUDIT_20260801.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

libhttp_SECURITY_AUDIT_20260803.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

libmsg_SECURITY_AUDIT_20260806.md

fix(libmsg): security audit round 4 - eliminate residual race + atomic server_fd

2026-08-07 21:27:05 +08:00

libsqlite3_SECURITY_AUDIT_20260806.md

docs(security): 更新 libsqlite3 审计报告修复状态

2026-08-06 18:14:01 +00:00

libth_SECURITY_AUDIT_20260804.md

docs: 新增 libth 安全审计与 aibox 开放版开发计划

2026-08-04 19:02:22 +08:00

pymsg_SECURITY_AUDIT_20260801.md

fix(pymsg): 异常信息脱敏与JSON深度/大数字限制，防信息泄露与DoS

2026-08-03 22:30:17 +08:00

SECURITY_HARDENING_PLAN_20260803.md

docs(security): 修正安全审计文档与代码不一致

2026-08-06 15:25:07 +00:00

smtp_SECURITY_AUDIT_20260801.md

feat(aibox): 创建/安装技能工具统一生成 .md 扩展名 + 下线旧版 smtp.py

2026-08-04 08:26:57 +08:00

static_SECURITY_AUDIT_20260801.md

fix(static): 禁用 yhdet 系列功能并迁移数据库访问到 db 服务

2026-08-03 22:05:02 +08:00

waf_SECURITY_AUDIT_20260801.md

docs(security): 更新全部模块审计报告，添加代码验证记录

2026-08-03 14:12:45 +08:00