zynk/irssi
2
0
Fork 0
mirror of https://github.com/irssi/irssi.git synced 2026-08-09 11:50:10 +02:00
Code Issues Projects Releases Packages Wiki Activity
The client of the future https://irssi.org
6,932 commits 7 branches 77 tags 14 MiB
  • C 90.6%
  • XS 3.4%
  • Perl 2.1%
  • Meson 2%
  • Prolog 1.5%
  • Other 0.4%
Find a file
Acts1631 801c342a53 scram: cap server-supplied iteration count 
The server-first-message in SCRAM SASL authentication carries an
i=<iteration_count> field that controls the PBKDF2 work factor.
Previously irssi parsed this with strtoul and only rejected the zero
case, then passed the value directly to PKCS5_PBKDF2_HMAC.

Because the call is synchronous on the glib main loop and the 20-second
SASL_TIMEOUT source is registered via g_timeout_add, a malicious
server can send i=4294967295 (or larger) and deterministically hang
irssi for the duration of the iteration count. Each reconnect attempt
repeats the DoS.

RFC 5802 section 5.1 explicitly allows a client to enforce a maximum
iteration count. 100000 is well above any real-world server
configuration (typically a few thousand) and bounds the worst-case
PBKDF2 cost to a fraction of a second on modern hardware.
2026-07-06 13:27:56 -04:00
.github/workflows Add muon fmt GitHub Actions workflow 2026-01-26 21:02:10 -08:00
.obs test OBS workflow 2022-05-19 14:37:59 +02:00
docs run meson formatter 2026-01-25 22:07:44 +01:00
fuzz-support Fix some glib deprecation warnings 2019-10-31 23:49:40 +01:00
scripts run meson formatter 2026-01-25 22:07:44 +01:00
src scram: cap server-supplied iteration count 2026-07-06 13:27:56 -04:00
subprojects up glib wrap 2026-01-23 21:21:10 +01:00
tests run meson formatter 2026-01-25 22:07:44 +01:00
themes run meson formatter 2026-01-25 22:07:44 +01:00
utils fix clang-format-xs boot code 2026-01-24 20:53:29 +01:00
.clang-format fix clang formatting 2021-04-01 21:21:06 +02:00
.gitattributes Add .gitattributes to ensure all shell scripts have LF as eol-style. 2016-01-31 20:49:59 +02:00
.gitignore good-bye and thanks, autotools 2022-02-19 21:44:10 +01:00
.muon_fmt.ini run meson formatter 2026-01-25 22:07:44 +01:00
AUTHORS Add OTR support. 2018-02-26 23:32:57 +01:00
COPYING Update FSF address. 2007-05-08 17:51:51 +00:00
INSTALL Add a few more compile dependencies to INSTALL document 2026-01-23 22:17:39 +01:00
irssi-icon.png New icon by ditCh. 2008-03-04 17:46:11 +00:00
irssi.conf new SHELP default alias 2022-04-24 15:40:20 +02:00
MANIFEST.in Add some missing files to make-dist 2022-02-20 18:55:45 +01:00
meson.build Format root meson.build 2026-01-26 21:02:10 -08:00
meson_options.txt remove deprecated defines 2022-02-20 17:33:36 +01:00
NEWS Merge tag '1.4.5' into integrate/1.4.5 2023-10-01 19:19:33 +02:00
README.md Update minimum required Perl version in readme 2024-04-01 22:10:35 +02:00
TODO Add todo for gnutls. 2008-03-30 13:53:33 +00:00

README.md

Irssi

Build Status

Irssi is a modular text mode chat client. It comes with IRC support built in, and there are third party ICB, SILC, XMPP (Jabber), PSYC and Quassel protocol modules available.

irssi

Download information

Development source installation

Ninja 1.8 and Meson 0.53

git clone https://github.com/irssi/irssi
cd irssi
meson Build
ninja -C Build && sudo ninja -C Build install

Release source installation

  • Download release
  • Verify signature
tar xJf irssi-*.tar.xz
cd irssi-*
meson Build
ninja -C Build && sudo ninja -C Build install

Requirements

See the INSTALL file for details

Documentation

Themes

Scripts

Modules

Security information

Please report security issues to staff@irssi.org. Thanks!

Bugs / Suggestions / Contributing

Check the GitHub issues if it is already listed in there; if not, open an issue on GitHub or send a mail to staff@irssi.org.

Irssi is always looking for developers. Feel free to submit patches through GitHub pull requests.

You can also contact the Irssi developers in #irssi on irc.libera.chat.