5 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Niko Marmeladkov	0ed9d18b27	Fix nil interface trap in GetByNumber ... Map lookup returns typed nil *Session for missing keys, which wraps into CallSession interface as non-nil typed nil. Nil check silently passes, causing nil dereference.	2026-06-30 14:33:41 +03:00
Niko Marmeladkov	53e877393d	Fix panic in marshalIdentity: dynamic number buffer instead of hardcoded 8 ... Number format is +0XXXYYYZZZ (11 chars), plus 2-byte length prefix = 13 bytes. Buffer was hardcoded to 8 bytes, causing slice bounds panic at runtime.	2026-06-30 13:51:38 +03:00
Niko Marmeladkov	4f6310c2bb	Fix PoW auth bypass: verify against issued challenge, not new one ... Store challenge from handleGetChallenge in session, then verify against it in handleSolve. Previously a fresh challenge was generated for verification, making auth trivially bypassable.	2026-06-30 13:47:17 +03:00
Niko Marmeladkov	dbb2782dd7	Fix missing ALPN NextProtos for QUIC handshake ... Add 'qcc' ALPN protocol to both ACME and insecure TLS configs. Bump golang.org/x/crypto and transitive x/ deps. Add golang.org/x/mobile for mobile client bindings.	2026-06-30 13:43:54 +03:00
Niko Marmeladkov	4f88a7eab1	Initial commit: QuiC Call server	2026-06-30 12:52:09 +03:00