Max LvandClaude 90ea095efe Fix findings from the security audit ...

Remote:
- TCP: handshake/connect deadlines follow --timeout instead of a 24h
  minimum, so idle sockets can no longer fill the connection pool.
- ACL: IPv4-mapped IPv6 addresses are matched against the IPv4 lists.
- UDP server now enforces the peer ACL and the outbound block list.
- ACL loading fails closed on bad files or invalid entries.
- TCP half-close is relayed instead of tearing the connection down.
- AEAD-2022 UDP sessions are created only after timestamp/replay checks.

ss-manager:
- Owner-only conf files (deleted on remove), 0600 control socket,
  umask 022, safe working directory, loopback-only IP addresses,
  per-user sender check on Linux, plugins only over the UNIX socket.
- Port canonicalisation, list() overflow, add/remove waits for the
  server, stale pid files can't signal unrelated processes.

Also: plugins drop to --user, daemonize readiness/pid file handling,
resolver cancellation, replay-filter fail-closed, key wiping, spec
strictness in AEAD/2022 parsing, JSON surrogate validation, ss:// plugin
name checks, embedding API state reset, Android protect_socket replies.

Adds tests/test_server_acl.py and tests/test_half_close.py and extends
the manager, ACL, AEAD-2022 and ssurl tests.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-10-27 16:30:19 +08:00

..

alloc_audit

C++20 port 12/14: seal the heap, capacity limits (#3078)

2026-10-15 10:08:05 +08:00

consumer

Add an embedding API: ss_local_start/stop/wait and a C++ wrapper (#3076)

2026-10-15 10:09:37 +08:00

experiments

Add opt-in printable TCP salt experiment for ss-local (#3063)

2026-10-13 09:09:51 +08:00

qemu

Add end-to-end test for ss-redir transparent proxy via QEMU

2026-02-07 19:01:32 +08:00

reference

C++20 port 15/15: remove the stream ciphers (#3079)

2026-10-15 10:15:53 +08:00

2022-blake3-aes-128-gcm.json

Add Shadowsocks 2022 (SIP022) ciphers

2026-08-19 18:15:35 +08:00

2022-blake3-aes-256-gcm.json

Add Shadowsocks 2022 (SIP022) ciphers

2026-08-19 18:15:35 +08:00

2022-blake3-chacha20-poly1305.json

Add Shadowsocks 2022 (SIP022) ciphers

2026-08-19 18:15:35 +08:00

aes-gcm.json

Update config under tests/ folder

2018-06-09 15:54:08 +09:00

async_dns_interop.py

Rename to shadowsocks-c with libuv, async DNS and CI lint (#3051)

2026-09-11 14:18:37 +08:00

chacha20-ietf-poly1305.json

Update config under tests/ folder

2018-06-09 15:54:08 +09:00

check_printable_pcap.py

Add opt-in printable TCP salt experiment for ss-local (#3063)

2026-10-13 09:09:51 +08:00

check_static_runtime.py

Rename to shadowsocks-c with libuv, async DNS and CI lint (#3051)

2026-09-11 14:18:37 +08:00

CMakeLists.txt

Fix findings from the security audit

2026-10-27 16:30:19 +08:00

docker_smoke.py

Add Docker publishing, recommended installation and project history (#3052)

2026-09-11 16:22:30 +08:00

interop.py

C++20 port 3/14: compile crypto, config, DNS, ACL and plugin modules as C++ (#3067)

2026-10-15 09:52:17 +08:00

measure_udp.py

Modernize C builds with offline dependencies and portable runtime helpers (#3050)

2026-09-11 13:42:11 +08:00

printable_salt_experiment.py

Add opt-in printable TCP salt experiment for ss-local (#3063)

2026-10-13 09:09:51 +08:00

redir.json

Add end-to-end test for ss-redir transparent proxy via QEMU

2026-02-07 19:01:32 +08:00

sip003_fixture.py

Modernize C builds with offline dependencies and portable runtime helpers (#3050)

2026-09-11 13:42:11 +08:00

stress_test.py

C++20 port 15/15: remove the stream ciphers (#3079)

2026-10-15 10:15:53 +08:00

test_acl_cpp.cpp

Fix findings from the security audit

2026-10-27 16:30:19 +08:00

test_acl_literal_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_aead2022_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_base64_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_buffer_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_cache_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_cache_reference_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_cli_docs.py

C++20 port 4/14: compile the event loop, UDP relay and programs as C++ (#3068)

2026-10-15 09:53:31 +08:00

test_cli.py

C++20 port 15/15: remove the stream ciphers (#3079)

2026-10-15 10:15:53 +08:00

test_core_arena.cpp

C++20 port 1/14: build, ownership core and allocation audit (#3065)

2026-10-15 09:45:54 +08:00

test_core_buffer.cpp

C++20 port 1/14: build, ownership core and allocation audit (#3065)

2026-10-15 09:45:54 +08:00

test_core_fixed_map.cpp

C++20 port 1/14: build, ownership core and allocation audit (#3065)

2026-10-15 09:45:54 +08:00

test_core_ownership.cpp

C++20 port 1/14: build, ownership core and allocation audit (#3065)

2026-10-15 09:45:54 +08:00

test_core_pool.cpp

C++20 port 1/14: build, ownership core and allocation audit (#3065)

2026-10-15 09:45:54 +08:00

test_core_result.cpp

C++20 port 1/14: build, ownership core and allocation audit (#3065)

2026-10-15 09:45:54 +08:00

test_crypto_aead2022_cpp.cpp

Fix findings from the security audit

2026-10-27 16:30:19 +08:00

test_crypto_aead_cpp.cpp

C++20 port 6/14: allocation-free AEAD codecs (#3070)

2026-10-15 09:56:12 +08:00

test_crypto_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_deb_build.sh

Rename to shadowsocks-c with libuv, async DNS and CI lint (#3051)

2026-09-11 14:18:37 +08:00

test_event_cpp.cpp

Add the C++ event layer over libuv (#3069)

2026-10-15 09:54:56 +08:00

test_half_close.py

Fix findings from the security audit

2026-10-27 16:30:19 +08:00

test_heap_guard_cpp.cpp

C++20 port 14/14: remove the C shims, report, fixes (#3077)

2026-10-15 10:11:56 +08:00

test_helpers.h

Raise the file descriptor limit for descriptor-heavy tests

2026-09-12 15:23:43 +08:00

test_helpers.hpp

C++20 port 1/14: build, ownership core and allocation audit (#3065)

2026-10-15 09:45:54 +08:00

test_interop_rust.sh

Modernize C builds with offline dependencies and portable runtime helpers (#3050)

2026-09-11 13:42:11 +08:00

test_ipset_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_ipset_reference_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_jconf_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_json_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_limits.py

C++20 port 12/14: seal the heap, capacity limits (#3078)

2026-10-15 10:08:05 +08:00

test_local_api_cpp.cpp

C++20 port 14/14: remove the C shims, report, fixes (#3077)

2026-10-15 10:11:56 +08:00

test_manager.py

Fix findings from the security audit

2026-10-27 16:30:19 +08:00

test_netutils_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_ppbloom_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_process_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_redir_qemu.sh

Modernize C builds with offline dependencies and portable runtime helpers (#3050)

2026-09-11 13:42:11 +08:00

test_ref_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test_resolver_cpp.cpp

C++20 port 14/14: remove the C shims, report, fixes (#3077)

2026-10-15 10:11:56 +08:00

test_rule_cpp.cpp

C++20 port 14/14: remove the C shims, report, fixes (#3077)

2026-10-15 10:11:56 +08:00

test_server_acl.py

Fix findings from the security audit

2026-10-27 16:30:19 +08:00

test_ss_setup.sh

Add ss-setup TUI tool with unit tests and CI integration

2026-02-07 18:30:20 +08:00

test_ssurl_cpp.cpp

Fix findings from the security audit

2026-10-27 16:30:19 +08:00

test_udp_session_eviction.py

C++20 port 9/14: own AEAD-2022 UDP sessions by reference (eviction fix) (#3073)

2026-10-15 10:02:02 +08:00

test_utils_cpp.cpp

C++20 port 16/16: config parsing on arenas, unit tests in C++ (#3080)

2026-10-15 10:17:23 +08:00

test.py

C++20 port 14/14: remove the C shims, report, fixes (#3077)

2026-10-15 10:11:56 +08:00

test.sh

C++20 port 15/15: remove the stream ciphers (#3079)

2026-10-15 10:15:53 +08:00

tunnel_interop.py

C++20 port 15/15: remove the stream ciphers (#3079)

2026-10-15 10:15:53 +08:00

udp_session_eviction_client.c

C++20 port 9/14: own AEAD-2022 UDP sessions by reference (eviction fix) (#3073)

2026-10-15 10:02:02 +08:00