rtty

Bug Fixes

• Verify TLS server identity

  • Fix missing server hostname verification and apply the final certificate verification setting before creating TLS sessions. Verification is enabled by default; the explicit --insecure option remains available.

• Prevent stalled TLS reads

  • Drain available TLS data on each read event so data buffered inside the TLS library is not left waiting for another socket event.

• Reject truncated terminal messages

  • Validate message length before reading the session ID, preventing invalid parsing of incomplete terminal messages.

• Make terminal file transfers more reliable

  • Improve transfer control, cancellation, and error reporting. Files uploaded from the browser to the device are written to temporary files and finalized only after successful receipt, without overwriting existing files. Canceled transfers clean up temporary files, and Ctrl+C restores terminal settings.

Improvements

• Allow startup without root privileges or the login program

  • The client can now start and connect to the server as a non-root user or on systems without login. Shell sessions still require root privileges and the login program. Non-root operation skips writes to /var/run/rtty to avoid permission errors.

• Show average file transfer speed

  • Terminal file transfer progress now displays average throughput, with total elapsed time included when the transfer completes.

• Simplify build dependencies

  • Remove the unused libcrypt dependency, so its development package is no longer required to build the client.

New Features

• Serial port forwarding

  • Add support for listing device serial ports and opening remote serial terminal sessions with configurable baud rate, data bits, stop bits, and parity.

• TCP port forwarding

  • Add support for accessing TCP services reachable from connected devices, with flow control and TCP half-close handling.

Full Changelog: https://github.com/zhaojh329/rtty/compare/v9.1.0...v9.2.0

问题修复

• 修复 TLS 服务端身份校验

  • 修复缺失的服务端主机名校验，并在创建 TLS 会话前应用最终的证书校验设置。默认启用校验，同时保留显式指定的 --insecure 选项。

• 避免 TLS 数据读取停滞

  • 在每次读事件中读取所有当前可用的 TLS 数据，避免 TLS 库内部已缓存的数据滞留、等待下一次套接字事件。

• 拒绝不完整的终端消息

  • 在读取会话 ID 前检查消息长度，避免对不完整的终端消息进行错误解析。

• 提升终端文件传输可靠性

  • 改进传输控制、取消操作和错误反馈。从浏览器上传到设备的文件先写入临时文件，完整接收成功后再保存为目标文件，且不会覆盖已有文件。取消传输时清理临时文件，按 Ctrl+C 后恢复终端设置。

改进优化

• 支持非 root 用户及无 login 程序的环境启动

  • 客户端现在可由非 root 用户启动，也可在未安装 login 的系统上启动并连接服务端。Shell 会话仍需 root 权限和 login 程序。非 root 运行时跳过写入 /var/run/rtty，避免权限错误。

• 显示文件平均传输速度

  • 终端文件传输进度现在显示平均传输速度，并在传输完成时显示总耗时。

• 精简构建依赖

  • 移除未使用的 libcrypt 依赖，构建客户端不再需要安装其开发包。

新功能

• 串口转发

  • 支持列出设备串口并打开远程串口终端，可配置波特率、数据位、停止位和校验方式。

• TCP 端口转发

  • 支持访问已连接设备可达的 TCP 服务，具备流量控制和 TCP 半关闭处理能力。

完整变更记录: https://github.com/zhaojh329/rtty/compare/v9.1.0...v9.2.0

Features

• Added INI configuration file support (via libinih) to simplify deployment and runtime parameter management.
• Added configurable HTTP idle timeout with the --http-timeout option.

Bug Fixes

• Fixed download free-space check behavior when mount entries are missing.

特性

• 新增 INI 配置文件支持（基于 libinih），便于统一管理运行参数与部署配置。
• 新增 HTTP 空闲超时参数 --http-timeout，连接管理更灵活。

修复

• 修复挂载项缺失场景下下载可用空间检查异常的问题。

Overview

This release addresses a critical stability issue in the HTTP proxy functionality and improves build system compatibility.

Changes

Bug Fixes

Fixed use-after-free in HTTP connection handling

Issue: A race condition could occur during the HTTP connection establishment phase. If a connection object was freed while an asynchronous connection attempt was in progress, the callback on_connected might access invalid memory, leading to a crash (segmentation fault) or assertion failure in the event loop.

Solution:

• Introduced a connection state flag (HTTP_CON_FLAG_CONNECTING) to track pending connections.
• Implemented a deferred deletion mechanism. If a connection is freed while connecting, the actual cleanup is postponed until the connection attempt completes (success or failure), ensuring the event loop watchers are safely stopped.

Improvements

Refactored HTTP connection flags

Change: Replaced the boolean https field in the http_connection structure with a bitmask flags. Benefit: This change improves code extensibility, allowing for more connection states (like the new connecting state) to be managed efficiently within a single field without increasing memory usage.

Build System

Fix compilation with newer CMake

Change: Updated the minimum required CMake version in CMakeLists.txt. Reason: Newer versions of CMake have deprecated or removed support for very old CMake versions (< 3.5). This ensures the project builds correctly in modern development environments.

Full Changelog: https://github.com/zhaojh329/rtty/compare/v9.0.3...v9.0.4

概述

本次发布修复了 HTTP 代理功能中的一个严重稳定性问题，并改进了构建系统的兼容性。

变更内容

错误修复

修复 HTTP 连接处理中的 Use-After-Free 问题

问题描述： 在 HTTP 连接建立阶段可能发生竞态条件。如果在异步连接尝试进行时释放了连接对象，on_connected 回调函数可能会访问无效内存，导致程序崩溃（段错误）或触发事件循环的断言失败。

解决方案：

• 引入了连接状态标志 (HTTP_CON_FLAG_CONNECTING) 来追踪挂起的连接。
• 实现了延迟删除机制。如果连接在建立过程中被释放，实际的清理工作会推迟到连接尝试完成（成功或失败）后进行，从而确保能够安全地停止事件循环观察者。

改进

重构 HTTP 连接标志

变更： 将 http_connection 结构体中的 https 布尔字段替换为位掩码 flags。 收益： 此更改提高了代码的可扩展性，允许在不增加内存使用的情况下，在一个字段内高效地管理更多的连接状态（如新增的连接中状态）。

构建系统

修复在较新 CMake 版本下的编译问题

变更： 更新了 CMakeLists.txt 中所需的最低 CMake 版本。 原因： 较新版本的 CMake 已经弃用或移除了对非常旧的 CMake 版本（< 3.5）的支持。此更新确保项目能在现代开发环境中正确构建。

完整变更记录: https://github.com/zhaojh329/rtty/compare/v9.0.3...v9.0.4

Bug Fixes

Fixed auto-reconnect when domain name resolution fails

Issue: When the rtty client encountered a domain name resolution failure (DNS lookup failure), it would not properly trigger the auto-reconnect mechanism. This caused the client to fail permanently instead of retrying the connection.

错误修复

修复域名解析失败时的自动重连功能

问题描述： 当 rtty 客户端遇到域名解析失败（DNS 查询失败）时，无法正确触发自动重连机制。这导致客户端永久性失败，而不是重试连接。