master

robbluofix(litebus): address round-4 security and reliability review findings

6625f593创建于 4月20日历史提交

文件	最后提交记录	最后更新时间
CMakeLists.txt	upload source code	8 个月前
tcp_socket.cpp	upload source code	8 个月前
tcp_socket.hpp	upload source code	8 个月前
tcpmgr.cpp	fix(litebus): address round-4 security and reliability review findings - tcpmgr.cpp: replace substring find() loopback check with TcpUrlHost() helper that extracts and validates HOST portion of tcp://HOST:PORT URL, preventing false match on tcp://127.attacker.com:port - litebus.cpp: guard LitebusInitializeC against null tcpLocalUrl/tcpLocalUrlAdv from C callers that do not set these new fields (avoids UB / segfault) - dual_port_e2e_test.cpp: add missing executils.hpp include for litebus::find_available_port; assert port > 0 in FindFreePort; add max-retry bound (100) on port-uniqueness loop; move thread creation outside WaitUntil lambda (avoid O(N) thread spawning on retry) - dual_port_test.cpp: add actormgr.hpp include for ActorMgr; use std::string overload to fix overload-resolution ambiguity - iam_server/main.cpp: guard local address construction so an empty GetLocalIP() with non-zero port cannot produce invalid ":PORT" string Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: Lwy_Robb <luowenyu4@huawei.com>	2 个月前
tcpmgr.hpp	feat(litebus): Add dual-port support for IAM server and LiteBus - Enhanced ModuleSwitcher to initialize LiteBus with an optional local address for plaintext listener. - Updated IAMStartParam structure to include localIp and localPort fields for internal access. - Modified IAM server flags to parse local IP and port, providing defaults when not specified. - Implemented request filtering in IAMActor to bypass AKSK verification for internal requests marked with X-Internal-Src header. - Added unit tests for IAM dual-port features, ensuring correct behavior for local and external requests. - Created end-to-end tests for LiteBus dual-port functionality, validating header injection and response correctness. Signed-off-by: Lwy_Robb <luowenyu4@huawei.com>	2 个月前