1974 Commits

Author SHA1 Message Date
Roger A. Light
15a163eb09 Don't enforce receive-maximum on the broker 2026-02-04 21:37:51 +00:00
Roger A. Light
578d30e90f Fix max_connections not being honoured on libwebsockets listeners.
Closes #3455. Thanks to FelixPopp.
2026-02-03 23:54:11 +00:00
Roger A. Light
df7b703080 Fix $SYS load values not being published initially.
Closes #3459. Thanks to hessijames79
2026-02-03 09:28:18 +00:00
Roger A. Light
695df7719d Fix building with WITH_TLS=no
Closes #3469. Thanks to iTitou.
2026-02-03 09:23:27 +00:00
Roger A. Light
a1dcebd273 Fix plugin/global_plugin option not allowing space characters. 2026-02-03 00:19:59 +00:00
Roger A. Light
6711465b24 Fix missing log error when loading missing plugin path 2026-02-03 00:19:59 +00:00
Roger A. Light
3c45da8d7e Fix inconsistent client disconnect log format 2026-02-03 00:19:59 +00:00
Roger A. Light
750c0f44d8 Fix address and port missing from disconnect messages 2026-02-02 23:50:42 +00:00
Roger A. Light
16f41e61fc Add MOSQUITTO_UNSAFE_ALLOW_SYMLINKS env var
Setting this environment variable allows sensitive files to be read
through symlinks.

Closes #3461. Thanks to Jeff Cutsinger
2026-02-02 16:33:37 +00:00
Roger A. Light
c2c5ed9853 Fix PUID/PGID checking for docker 2026-01-30 09:41:31 +00:00
Roger A. Light
233999cc0a Fix callback handling when using plugin_load. 2026-01-29 14:10:10 +00:00
Roger A. Light
9ccdf203ab Remove logging printf 2026-01-28 21:02:40 +00:00
Roger A. Light
ebd3f228e0 Re-enable support for TLS 1.1 in the broker but not by default
Log a scary message if used.
2026-01-28 00:40:24 +00:00
Roger A. Light
06ec09cd19 Fix use after free when restoring retained message from sqlite 2026-01-27 17:10:39 +00:00
Roger A. Light
b4fa181321 Remove whitespace 2026-01-23 09:28:53 +00:00
Roger A. Light
0d89a649c2 More warning fixes 2026-01-23 09:26:09 +00:00
Roger A. Light
7de6cb42ef Compiler warning fixes 2026-01-23 08:44:34 +00:00
Roger A. Light
3e0f79bd89 Add missing errno.h for kqueue. 2026-01-21 22:42:47 +00:00
Roger A. Light
758bf6a127 Minor compiler warning fixes 2026-01-21 16:58:42 +00:00
Roger A. Light
fa07bb9722 Don't shadow variable 2026-01-21 15:49:15 +00:00
Roger A. Light
61794d79bc String literal should be const 2026-01-21 15:48:34 +00:00
Roger A. Light
61e1981d6f Remove duplicate declaration 2026-01-21 15:48:11 +00:00
Roger A. Light
d346179137 Formatting 2026-01-18 22:45:10 +00:00
Roger A. Light
81a9385877 Merge branch 'fixes' into develop 2026-01-15 00:49:53 +00:00
Roger A. Light
3ab1bae406 Merge branch 'fixes' 2026-01-14 19:10:52 +00:00
Roger A. Light
ab052294f7 Prevent certificates and TLS-PSK on the same listener
Prior to this change, configuring TLS-PSK first then certificates was
not allowed. This also denies the case where certificates are configured
first.
2026-01-14 19:09:59 +00:00
Roger A. Light
06a13830df Fix leak when loading certificate names 2026-01-14 11:41:11 +00:00
Roger A. Light
9f576d2a71 Set max_packet_size to 2,000,000 bytes by default 2026-01-13 12:15:46 +00:00
Roger A. Light
8ad81a9917 MOSQ_EVT_ACL_CHECK event is now passed message properties where possible.
Closes #3176.
2026-01-12 23:51:02 +00:00
Roger A. Light
dd57e98c6b Limit auto_id_prefix to 50 characters
Back port from develop.

Closes #3440. Thanks to Lukas Dresel
2026-01-12 22:15:52 +00:00
Roger A. Light
1c9500b554 Fix potential crash on loading corrupt obsolete persistence file
Fix potential crash on startup if a malicious/corrupt persistence file from
mosquitto 1.5 or earlier is loaded.

Closes #3439. Thanks to Lukas Dresel
2026-01-12 22:08:57 +00:00
Roger A. Light
f3feafb91a Fix compiler warning 2026-01-12 21:38:12 +00:00
Roger Light
144d1fd86b http-api: Fix canonical pathname calculation on Windows 2026-01-12 20:39:55 +00:00
Roger A. Light
02eee2a606 Minimum http dir length should be 1, not 2. 2026-01-12 18:45:49 +00:00
Roger Light
5b93c81269 http-api: Allow anon access on local only connections 2026-01-12 17:58:09 +00:00
Roger A. Light
428308e2cb Fix crash when loading invalid persistence file.
Closes oss-fuzz #474389119. Regression in unreleased code.
2026-01-09 22:15:34 +00:00
Roger A. Light
23c918ee4a Add fuzzer for proxy v2 and fix a few issues.
Closes #3435. Thanks to kangyangWHU.
2026-01-06 23:31:57 +00:00
Roger A. Light
ac5d7ba2b5 http-api: Fix leak on error 2026-01-06 15:51:59 +00:00
Ben Wijen
68c04fe504 align SigThreadProc #ifdef
The other SigThreadProc #ifdef only check for WIN32
Make sure compilation on cygwin (and msys2) doesn't break

Signed-off-by: Ben Wijen <ben@wijen.net>
2026-01-06 14:57:49 +00:00
Roger A. Light
f1716d0952 Add further missing free on error 2026-01-06 14:27:31 +00:00
609bob
b91bb960c0 fix: Add missing chunk->payload free in error handler Signed-off-by:1850029304@qq.com 2026-01-06 14:17:37 +00:00
Roger A. Light
7e5b7d02ca Persist: Use meaningful return codes 2026-01-06 13:37:12 +00:00
Roger A. Light
34ef74e7a4 Fix corrupt persistence restore case 2026-01-06 13:37:12 +00:00
Nicholas Jackson
fdf1943b1b Do not include microhttpd.h if WITH_HTTP_API is disabled
Signed-off-by: Nicholas Jackson <nickajacks1@gmail.com>
2025-12-08 18:40:21 +00:00
Roger A. Light
534d59797e Don't persist v5 clean start=false session-expiry-interval=0 clients
This is for the built-in `persistence true` mode only.

Closes #3418. Thanks to nickajacks1.
2025-12-04 11:48:14 +00:00
Roger A. Light
a45badc57f Add macros to make session expiry values clearer 2025-12-04 11:19:36 +00:00
Roger A. Light
935de54382 Minor refactor 2025-12-02 16:21:15 +00:00
Norbert Heusser
68d933a22f Fixed forwarding of subscription identifier to client message peristence callback
Signed-off-by: Norbert Heusser <norbert.heusser@cedalo.com>
2025-12-02 16:11:17 +00:00
Roger A. Light
8c73aa6386 Windows: Add broker linker exports file to installer 2025-11-26 15:00:45 +00:00
Roger A. Light
6fb01c7337 Add broker logging for protocol errors 2025-11-26 14:34:10 +00:00