1
0
mirror of https://github.com/coturn/coturn.git synced 2026-10-24 00:08:57 +03:00

Commit Graph

  • 6fe2247d00 Fix NULL deref: --prometheus-address/-path/-port take a required value (#2005) Pavel Punsky 2026-07-25 21:02:55 -07:00
  • beb4de9dcb DTLS listener: correct the handshake buffer bound and remove the non-functional client-cert path (#2003) Pavel Punsky 2026-07-25 21:00:50 -07:00
  • 75f89e6faf docs: cite RFC 7350 for DTLS support in README (#2004) Pavel Punsky 2026-07-25 20:57:38 -07:00
  • 142dd93b30 Add --stateless-nonce: bound memory under valid-structure STUN floods (#1999) (#2002) Pavel Punsky 2026-07-25 16:16:01 -07:00
  • 313b24fe14 Restore support for hiredis < 1.1.0 (for AlmaLinux/RHEL/Rocky Linux 9) (#2001) Robert Scheck 2026-07-25 02:14:15 +02:00
  • f3ef47fbaa docker: Upgrade Coturn to 4.15.0 version docker/4.15.0-r0 Kai Ren 2026-07-22 13:44:40 +03:00
  • a792defb28 docker: Update Debian "trixie" to 20260713 snapshot Kai Ren 2026-07-22 13:42:06 +03:00
  • ac6a9633b1 Update version to 4.15.0 4.15.0 Pavel Punsky 2026-07-21 22:10:51 -07:00
  • ca87ff0511 Add --drain-min-allocations: shutdown threshold for drain mode (#1997) Pavel Punsky 2026-07-21 22:08:49 -07:00
  • ab762f334f Merge commit from fork Pavel Punsky 2026-07-21 08:39:33 -07:00
  • 321806b331 Count every STUN Binding response in the Prometheus metrics (#1996) Pavel Punsky 2026-07-21 08:27:20 -07:00
  • 87c624ce4c Fix remaining misaligned wire-buffer accesses; add turn_read/write helpers (#1995) Pavel Punsky 2026-07-20 07:43:11 -07:00
  • 01d597ac06 fix misaligned value reads in three stun attribute accessors (#1994) alhuda 2026-07-20 07:40:59 +05:30
  • fa257c15dc Fix uint32_t counter wraparound in relay port allocator (#1992) Pavel Punsky 2026-07-19 18:56:07 -07:00
  • 22deba54f3 Join worker threads on shutdown to fix exit-time OpenSSL race (#1991) Pavel Punsky 2026-07-19 12:27:00 -07:00
  • 197d64ee98 fix: disable OpenSSL atexit cleanup in turnserver (#1990) Pavel Punsky 2026-07-19 11:37:05 -07:00
  • 2e74202862 Tests: del alt server last entry (#1989) Pavel Punsky 2026-07-18 11:19:52 -10:00
  • c4d8a159d3 release list mutex when del_alt_server removes the last entry (#1988) alhuda 2026-07-18 22:56:46 +05:30
  • c15c2558c0 tests: add regression coverage for misaligned STUN attribute access (#1987) Pavel Punsky 2026-07-16 21:49:43 -10:00
  • 89ee928358 Alternate server tcp udp distinction (#1605) Cybermilitia 2026-07-17 07:38:55 +03:00
  • 21d1f37a01 Don't call setgroups unconditionally in mainrelay (#1508) networkException 2026-07-15 22:01:22 +02:00
  • ce8b25737d feat: RFC 8016 graceful dual-5-tuple mobility handoff (#1975) Pavel Punsky 2026-07-14 21:28:29 -10:00
  • 54fe73b9f9 Implement a minimum log level option (#1222) Paul Wayper 2026-07-15 06:27:46 +10:00
  • 068afba010 refactor: flatten send_data_from_ioa_socket_nbh with guard clauses (#1985) Pavel Punsky 2026-07-14 07:58:15 -10:00
  • 01638a64d3 reset reused udp recv buffer offset in dtls listener (#1986) alhuda 2026-07-14 23:27:46 +05:30
  • 2352228d0a zero channel-data padding in stun_init_channel_message_str (#1984) alhuda 2026-07-14 07:53:35 +05:30
  • 554322e86c test: add RFC 5780 (NAT behavior discovery) coverage (#1982) Pavel Punsky 2026-07-12 19:43:51 -10:00
  • 17e83e5bac fix: remove unreachable null-deref branch in lm_map_put (#1983) Pavel Punsky 2026-07-12 19:43:26 -10:00
  • bc1791ed80 feat: fail-fast allocation wrappers (log + abort on OOM) (#1981) Pavel Punsky 2026-07-12 12:20:26 -10:00
  • 3382fb0bdd fix size_t underflow in telnet _process data emit (#1980) alhuda 2026-07-13 02:11:40 +05:30
  • 1d4a36b5dd avoid leaks on realloc failure in tcp relay allocation (#1977) alhuda 2026-07-12 10:46:31 +05:30
  • 65c2326d31 fix off-by-one write past realm buffer in redis_list_admin_users (#1978) alhuda 2026-07-11 05:10:04 +05:30
  • ae16d101b1 docker: Update Debian "trixie" to 20260623 snapshot Kai Ren 2026-07-06 09:20:38 +03:00
  • 7027626e88 fix: heap-allocate uclient STUN message buffers instead of stack (#1976) Pavel Punsky 2026-07-05 18:42:03 -07:00
  • 927bb2d600 fix: log explicit error when configured tls-listening-port cannot start (#1974) Pavel Punsky 2026-07-05 16:39:37 -07:00
  • f4f0ec42c9 fix: use bounded snprintf in apputils.c (#1966) OrbisAI Security 2026-07-06 00:14:46 +05:30
  • 46b3abcbc1 fix: send SNI host name in turnutils_uclient TLS connections (#1973) Pavel Punsky 2026-07-04 20:01:15 -07:00
  • 9eccdf1014 bound mssp subnegotiation parse to the buffer end (#1972) alhuda 2026-07-05 08:22:48 +05:30
  • 66833df428 fix: cast to unsigned char before isspace() in read_config_file (#1968) Pavel Punsky 2026-07-03 17:27:27 -07:00
  • 37df051316 fix: bind mobility session-resume to the original allocation owner (#1969) Pavel Punsky 2026-07-03 16:01:31 -07:00
  • 274460fae5 null-terminate http request buffer before verbose %s log (#1967) alhuda 2026-07-04 00:40:06 +05:30
  • 9608358866 fix: reject ACME requests via signed return (#1965) Pavel Punsky 2026-06-27 20:03:42 -07:00
  • ed32e1fb6c fix: avoid uint16_t truncation overflow in STUN message length (#1964) Pavel Punsky 2026-06-26 21:08:54 -07:00
  • d154defe73 configure: detect hiredis_ssl for Redis TLS in autotools build (#1963) Pavel Punsky 2026-06-26 19:39:20 -07:00
  • af69ba530b free EVP_CIPHER_CTX on error returns in oauth gcm encode/decode (#1962) alhuda 2026-06-27 07:48:22 +05:30
  • ac3fe3a9da Upgrade actions/cache from 5 to 6 version (#1961) dependabot[bot] 2026-06-24 09:26:37 +02:00
  • 190f91dbfc Upgrade Docker image to 4.14.0 Coturn version docker/4.14.0-r0 Kai Ren 2026-06-22 11:16:54 +03:00
  • 25ce2c8e06 Update Alpine to 3.24.1 version to fix OpenSSL CVEs in Docker image Kai Ren 2026-06-22 11:16:20 +03:00
  • 8cd19518d3 Update to 4.14.0 (#1959) 4.14.0 Pavel Punsky 2026-06-21 16:25:01 -07:00
  • 47ce433cde Add per-source rate-limiting of UDP 401 Unauthorized responses (#1957) Pavel Punsky 2026-06-21 14:25:09 -07:00
  • b744e34229 Fix realm quota data race and warnings (#1958) Pavel Punsky 2026-06-21 12:01:11 -07:00
  • 53f3ed9104 Prom https (#1956) Pavel Punsky 2026-06-20 23:02:01 -07:00
  • 1ec81eff10 Build Prometheus exporter from vendored local sources (#1955) Pavel Punsky 2026-06-20 18:58:30 -07:00
  • 4eac713687 fix signed-char index out-of-bounds read in base64_decode (#1950) alhuda 2026-06-21 05:15:23 +05:30
  • 55190abff5 Flush prometheus hot-path counters once per second to kill lock contention (#1954) Pavel Punsky 2026-06-20 16:43:56 -07:00
  • f429b0b5f2 Fix relay threads override (#1953) Pavel Punsky 2026-06-20 16:12:17 -07:00
  • 273f2e8a0c Add optional TLS transport for Redis connections (#1951) Pavel Punsky 2026-06-20 16:04:29 -07:00
  • 77b4e2d758 Add out-of-tree patch to restore deprecated OpenSSL 1.1.1 support (#1952) Pavel Punsky 2026-06-20 14:34:29 -07:00
  • 5f6e9ed65a validate hmackey length in sqlite_get_user_key before hex decode (#1948) alhuda 2026-06-20 08:07:53 +05:30
  • 690112a108 Bump actions/checkout from 6 to 7 (#1949) dependabot[bot] 2026-06-18 21:23:23 -07:00
  • 7efb6c74d1 Upgrade Docker image to 4.13.1 Coturn version docker/4.13.1-r0 Kai Ren 2026-06-15 12:24:28 +03:00
  • 1937559e24 Upgrade Docker image to 4.13.0 Coturn version docker/4.13.0-r0 Kai Ren 2026-06-15 10:42:59 +03:00
  • e980138252 Upgrade Alpine 3.24 version in Docker image Kai Ren 2026-06-15 10:27:15 +03:00
  • fff7aa5ca0 Update Debian "trixie" to 20260610 snapshot in Docker image Kai Ren 2026-06-15 10:25:36 +03:00
  • f696c74fce Update version to 4.13.1 4.13.1 Pavel Punsky 2026-06-14 22:25:27 -07:00
  • d49ee56aa9 Deny link-local / ULA / site-local relay peers by default (#1947) Pavel Punsky 2026-06-14 22:22:41 -07:00
  • e2735cf0b6 Auto-deny coturn's own database backend endpoints as relay peers (#1946) Pavel Punsky 2026-06-14 20:27:45 -07:00
  • cf4b4952de Canonicalize all IPv4-in-IPv6 encodings before peer-IP checks (#1945) Pavel Punsky 2026-06-14 19:29:21 -07:00
  • 07f0d0926d null-terminate server_name in stun_is_challenge_response_str (#1944) alhuda 2026-06-15 01:49:04 +05:30
  • bd02141ad8 Update version to 4.13.0 4.13.0 Pavel Punsky 2026-06-13 14:49:38 -07:00
  • 65ab2475d3 Bump repolevedavaj/install-nsis from 1.2.0 to 1.2.1 (#1943) dependabot[bot] 2026-06-11 20:43:40 -07:00
  • d88c56bfc1 Fix UDP receive buffer ownership (#1938) Pavel Punsky 2026-06-11 08:41:39 -07:00
  • 5a90c92e09 Fix missing sqlite3 dependendcy (#1941) Mészáros Mihály 2026-06-11 17:28:44 +02:00
  • 88bd06d280 Fix configure MANPREFIX typo (#1940) Mészáros Mihály 2026-06-11 17:27:19 +02:00
  • dedd8e05dc Fix test_redis_format link failure (#1939) Pavel Punsky 2026-06-10 00:15:51 -07:00
  • 2ce03b8780 Add continuous latency mode to stunclient (#1937) Pavel Punsky 2026-06-09 23:21:14 -07:00
  • 8fa38032bb Merge commit from fork Pavel Punsky 2026-06-09 23:02:29 -07:00
  • 1383f9df27 Adapt .gitignore to allow files already in repo (#1935) (#1936) tbart 2026-06-10 07:58:29 +02:00
  • b057acbebe Merge commit from fork Pavel Punsky 2026-06-05 22:12:10 -07:00
  • e72930f571 Merge commit from fork Pavel Punsky 2026-06-05 18:59:21 -07:00
  • 5ca467e709 Security hardening: port parsing, admin brute-force throttle, credential log redaction, constant-time compare, OAuth bounds checks, permission cap (#1932) Pavel Punsky 2026-05-30 22:39:39 -07:00
  • 8c7d8fcb86 Enable --udp-recvmmsg by default on Linux (#1930) Pavel Punsky 2026-05-30 21:27:05 -07:00
  • 06ae361130 Restrict recvmmsg fast path to shared fan-in sockets (make --udp-recvmmsg useful standalone) (#1929) Pavel Punsky 2026-05-30 21:20:46 -07:00
  • d7f6af68ff Expose recvmmsg/sendmmsg UDP batch sizes as Prometheus metrics (#1928) Pavel Punsky 2026-05-30 17:42:11 -07:00
  • b17f5c482f Add --udp-sendmmsg-log to observe egress sendmmsg/UDP-GSO batching (#1927) Pavel Punsky 2026-05-30 17:30:45 -07:00
  • 9f488fe323 Reap TURN permissions/channels via a per-thread sweep instead of per-object timers (#1926) Pavel Punsky 2026-05-30 16:50:27 -07:00
  • 68e6e00e3b Fix sendmmsg stride bug in multiplex-peer UDP batch flush (#1925) Pavel Punsky 2026-05-30 12:38:03 -07:00
  • fbf064d6f5 Wrap atomic everywhere (#1922) Pavel Punsky 2026-05-30 11:33:01 -07:00
  • 732c249b92 Upgrade Docker image to 4.11.0 Coturn version docker/4.12.0-r0 Kai Ren 2026-05-25 19:45:54 +03:00
  • bfacd81627 Merge commit from fork 4.12.0 Pavel Punsky 2026-05-24 09:56:03 -07:00
  • b84dbab1d1 Fix string validation (#1924) Pavel Punsky 2026-05-23 22:44:45 -07:00
  • c02aa24a52 Update version to 4.12.0 (#1923) Pavel Punsky 2026-05-23 20:50:07 -07:00
  • a6bf67265a Update khash to the latest version (#1919) Pavel Punsky 2026-05-22 12:16:49 -07:00
  • de2111c012 Update readme to match latest changes (#1920) Pavel Punsky 2026-05-22 11:22:40 -07:00
  • e468cee3bd Add DeepWiki link to the README Gustavo Garcia 2026-05-19 11:32:04 +02:00
  • 7016b565fa Update docs for drop-invalid-packets and response-origin-only-with-rfc5780 (#1918) Corey Siltala 2026-05-17 21:19:08 -05:00
  • e0c37a3aa0 Multiplexpeer (#1916) Pavel Punsky 2026-05-17 19:16:55 -07:00
  • 7cde430a98 examples: exercise uclient thread pools, UDP-GSO, recv_pps in CI tests (#1914) Pavel Punsky 2026-05-16 14:55:56 -07:00
  • 0f81165ad8 Fix TTL/TOS type conversion (#1915) Pavel Punsky 2026-05-15 23:27:10 -07:00
  • fb94ab117d turnutils_uclient: sender thread pool + UDP-GSO send batching + recv_pps reporting (#1913) Pavel Punsky 2026-05-11 20:59:12 -07:00