This is a bugfix/security release containing the following changes:
We’d like to thank Mellnik for his report of one of the vulnerabilities in SLikeNet/RakNet.version 0.1.3 (23-08-2019 21:00 UTC)
*** This release resolves 2 user reported issue (2 completely)
*** This release contains security fixes - overall CVSS score: 7.1
General:
* several smaller changes, fixes, and code cleanup (#236, #238, #269)
* documentation updates (#269)
* updated changelog entries related to security issues in previous versions (#269)
Core:
General:
* fixed NonNumericHostString() incorrectly identifying numeric as non-numeric addresses (#262)
BitStream:
* SECURITY: fixed BitStream::GetNumberOfUnreadBits() returning an incorrect value, if the readOffset exceeds the number of used bits (#278 - CVSS score: 7.1)
* SECURITY: fixed multiple BitStream::ReadXXX()-methods causing buffer overruns when reading data from the stream (#267, #272 - CVSS score: 7.1)
* SECURITY: fixed BitStream::Write() version causing a buffer overrun when reading data from the provided stream (#268 - CVSS score: 7.1)
FullyConnectedMesh2:
* fixed incorrect delete in FullyConnectedMesh2::Clear() when using a custom allocator (#249)
PacketizedTCP:
* SECURITY: fixed buffer overrun in PacketizedTCP::SendList() resulting in potential leaking arbitrary data (#221 - CVSS score: n/a)
RakNetSocket2:
* fixed failure in RNS2_Berkley::BindSharedIPV4() always reporting an "unknown" error on OSX (#258)
* fixed RakNetSocket2::DomainNameToIP() failing to resolve the domain name (#264)
RakPeer:
* fixed crash in RakPeer::GetNumberOfAddresses() when the machine has >= 10 IPs (#261)
RakWString:
* added missing definition of global +-operator for two RakWStrings (#225)
ReplicaManager3:
* fixed incorrect delete in ReplicaManager3::Clear() when using a custom allocator (#249)
SystemAddress:
* fixed multiple issues related to port resolution in hostnames upon construction or through SystemAddress::FromString() (#263 - SLNET_46)
* fixed cases where using a hostname to create a system address, calling SystemAddress::FromString(), or SystemAddress::SetBinaryAddress() can fail in IPv4 mode (#264)
* fixed localhost not being resolved properly, if set to something other than 127.0.0.1 on the current system (#265)
TeamManager:
* fixed incorrect delete in TeamManager::Clear() when using a custom allocator (#249)
Building:
General:
* fixed some compile errors when enabling IPv6 on Linux/OSX (#220)
* fixed compile error when enabling OPENSSL on Linux/OSX (#273)
CrashReporter:
* fixed compile error when compiling in RAKNET_COMPATIBILITY mode (#223)
Lobby2:
* fixed compile error when compiling in RAKNET_COMPATIBILITY mode (#223)
Swig:
* fixed non-working created DLL when using the Visual Studio project (#228)
* fixed compile errors in CSharpTestApp (previously called SwigTestApp) (#226)
* fixed multiple warnings when generating C# files (#227)
* fixed warning when building shared library with C# integration (#242)
Further information and download links are available on the product page.
If you want to support the continuous development of SLikeNet, we would appreciate if you consider donating a small amount to help us cover our running costs.
Due to license requirements we have to add the following statements:
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/)
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)
This product includes software written by Tim Hudson (tjh@cryptsoft.com)