LCE-Hub-Mirrors/LCE-Emerald-Launcher
1
2
Fork 0
mirror of https://github.com/LCE-Hub/LCE-Emerald-Launcher.git synced 2026-07-24 18:17:15 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
LCE-Emerald-Launcher/src-tauri
History
M1noa f4f438f688 fix(LCEL-04): bind relay to 127.0.0.1 + cap read_line at 8 KiB 
two changes:

1. run_relay_proxy bound TcpListener to 0.0.0.0:61000. any LAN host
   could connect to this port and their bytes were piped to the
   upstream relay - no authentication of the local peer. changed to
   127.0.0.1:61000 since the game process connects on loopback.

2. read_line read byte-by-byte into a Vec<u8> with no size cap. a
   malicious peer (relay or LAN) sending an unbounded line without
   \n could OOM the launcher. capped at 8 KiB (relay control lines
   are tiny - HOST/JOIN tokens + small id).
2026-07-16 20:26:49 -05:00
..
capabilities fix(lceonline): client not opening & webview window for lceonline login (#129) 2026-07-12 09:43:17 +03:00
gen/schemas fix(versions): custom path empty directory, fixes #127 (#131) 2026-07-12 10:06:37 +03:00
icons feat(icon): macOS style (#106) 2026-06-30 22:31:11 +03:00
resources/DLC/Emerald Skin Pack
scripts
src fix(LCEL-04): bind relay to 127.0.0.1 + cap read_line at 8 KiB 2026-07-16 20:26:49 -05:00
.gitignore
build.rs
Cargo.lock bump (#133) 2026-07-12 20:11:06 +03:00
Cargo.toml bump (#133) 2026-07-12 20:11:06 +03:00
tauri.conf.json bump (#133) 2026-07-12 20:11:06 +03:00
tauri.nightly.conf.json bump (#133) 2026-07-12 20:11:06 +03:00