Alex Efros

buffer overflow detected

2

After recompiling rtorrent-0.9.8 using gcc-12.2.1 with extra hardening (`-D_FORTIFY_SOURCE=3 -D_GLIBCXX_ASSERTIONS`, see https://wiki.gentoo.org/wiki/Hardened/Toolchain#Changes for more details) it start crashing on `session.path.set` directive. ``` $ echo "session.path.set = $HOME/.rtorrent" > ~/.rtorrent.rc $...

Add "nosleep" linter

4

### Your feature request related to a problem? Please describe. Using time.Sleep in tests is a mistake in most of cases. ### Describe the solution you'd like. Linter should detect...

This result in "105: already subscribed" error if we'll do this: ``` subs1, _ := client.NewSubscription(ch) subs1.Subscribe() subs1.Close() subs2, _ := client.NewSubscription(ch) subs2.Subscribe() ``` This happens because Close calls `s.centrifuge.removeSubscription()`...

Client.Close should wait until all goroutines will exit. We're using Centrifugo v3, so I didn't tested is this issue actual for 0.9.x.

Use ~/.minica/ by default

7

I suppose main use case for minica is to enable developing projects on local workstation. This means we'll have just one CA key imported into all local browsers, and per-project...

Encrypt CA key with password

3

While minica is designed for local use it's CA key still can be stolen and used for MitM attack targeted on minica user. Please make it possible to manually control...

It make sense to add current time and local hostname to CA name when generating CA key to make it easier to spot in browser's trusted CA list.

0.5.0 require dulwich-0.9.1

1

README says "requires at least Dulwich 0.8.6", but 0.9.0 throws: ``` File "/usr/lib64/python2.7/site-packages/hggit/git_handler.py", line 891, in upload_pack new_refs = client.send_pack(path, changed, genpack) File "/usr/lib64/python2.7/site-packages/dulwich/client.py", line 441, in send_pack proto, unused_can_read...

Looks like you've tags up to 0.5.0 on bitbucket, but several latest tags absent on github.

This PR was automatically created by Snyk using the credentials of a real user.Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of...