[PR #2764] [CLOSED] fix: ipc input validation #2939

New issue

Closed

opened 2026-10-14 21:06:21 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-14 21:06:21 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/amnezia-vpn/amnezia-client/pull/2764
Author: @NickVs2015
Created: 6/24/2026
Status: ❌ Closed

Base: dev ← Head: fix/valnurability_dev

📝 Commits (8)

f75b239 fix: resolve critical IPC security vulnerabilities
e3e6b15 fix: extend IPC security validation to macOS firewall
b6f15b4 fix: linux reconnect, DNS rewrite, dbus async, killswitch and NM fixes
2c68aa4 fix: control resetIpStack when destroy DnsUtilsLinux
80238a0 fix: linux DNS set on connect and cleanup on disconnect for AWG/WireGuard
79e28c5 fix: suppress linux firewall errors and add missing 400.allowPIA anchor
cbcdf0f fix: remove comments
6aad859 fix: make Linux DNS setup reliable under killswitch

📊 Changes

14 files changed (+506 additions, -103 deletions)

View changed files

📝 client/core/utils/networkUtilities.cpp (+15 -7)
📝 client/daemon/daemon.cpp (+15 -16)
📝 client/platforms/linux/daemon/dnsutilslinux.cpp (+161 -35)
📝 client/platforms/linux/daemon/dnsutilslinux.h (+18 -1)
📝 client/platforms/linux/daemon/linuxfirewall.cpp (+65 -20)
📝 client/platforms/linux/daemon/linuxfirewall.h (+1 -0)
📝 client/platforms/linux/daemon/wireguardutilslinux.cpp (+5 -1)
📝 client/vpnConnection.cpp (+23 -0)
📝 ipc/ipc.h (+47 -4)
📝 ipc/ipcserver.cpp (+30 -1)
📝 ipc/ipcserverprocess.cpp (+5 -0)
📝 service/server/killswitch.cpp (+82 -16)
📝 service/server/localserver.cpp (+38 -1)
📝 service/server/router_linux.cpp (+1 -1)

📄 Description

Fix valnurability finded during research

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/amnezia-vpn/amnezia-client/pull/2764 **Author:** [@NickVs2015](https://github.com/NickVs2015) **Created:** 6/24/2026 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `fix/valnurability_dev` --- ### 📝 Commits (8) - [`f75b239`](https://github.com/amnezia-vpn/amnezia-client/commit/f75b239d693ac5f80127db61c40a4362454824ca) fix: resolve critical IPC security vulnerabilities - [`e3e6b15`](https://github.com/amnezia-vpn/amnezia-client/commit/e3e6b15ff1b425d1cff8b76c24f2fad618a46258) fix: extend IPC security validation to macOS firewall - [`b6f15b4`](https://github.com/amnezia-vpn/amnezia-client/commit/b6f15b4b4903c46ccd5384988f97aae74e5c063f) fix: linux reconnect, DNS rewrite, dbus async, killswitch and NM fixes - [`2c68aa4`](https://github.com/amnezia-vpn/amnezia-client/commit/2c68aa4185da9088ecfb6d0c966eb5d6ccbdd3a6) fix: control resetIpStack when destroy DnsUtilsLinux - [`80238a0`](https://github.com/amnezia-vpn/amnezia-client/commit/80238a0620495cc5c8848fd898c2bdd35d45db4f) fix: linux DNS set on connect and cleanup on disconnect for AWG/WireGuard - [`79e28c5`](https://github.com/amnezia-vpn/amnezia-client/commit/79e28c55df5e33004631c6cc59b50c3aa1e36f3b) fix: suppress linux firewall errors and add missing 400.allowPIA anchor - [`cbcdf0f`](https://github.com/amnezia-vpn/amnezia-client/commit/cbcdf0f2218697dc00032fbebb8fce912d695c45) fix: remove comments - [`6aad859`](https://github.com/amnezia-vpn/amnezia-client/commit/6aad8599750012e915538645533bec45819368e7) fix: make Linux DNS setup reliable under killswitch ### 📊 Changes **14 files changed** (+506 additions, -103 deletions) <details> <summary>View changed files</summary> 📝 `client/core/utils/networkUtilities.cpp` (+15 -7) 📝 `client/daemon/daemon.cpp` (+15 -16) 📝 `client/platforms/linux/daemon/dnsutilslinux.cpp` (+161 -35) 📝 `client/platforms/linux/daemon/dnsutilslinux.h` (+18 -1) 📝 `client/platforms/linux/daemon/linuxfirewall.cpp` (+65 -20) 📝 `client/platforms/linux/daemon/linuxfirewall.h` (+1 -0) 📝 `client/platforms/linux/daemon/wireguardutilslinux.cpp` (+5 -1) 📝 `client/vpnConnection.cpp` (+23 -0) 📝 `ipc/ipc.h` (+47 -4) 📝 `ipc/ipcserver.cpp` (+30 -1) 📝 `ipc/ipcserverprocess.cpp` (+5 -0) 📝 `service/server/killswitch.cpp` (+82 -16) 📝 `service/server/localserver.cpp` (+38 -1) 📝 `service/server/router_linux.cpp` (+1 -1) </details> ### 📄 Description Fix valnurability finded during research --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-14 21:06:21 +00:00